How access works in IEMSuite
Access is controlled by roles, and each role is a set of permissions in an `Entity:Action` format (for example `Order:read` or `Product:manageRoles`). You assign a role to each person, so everyone sees and does exactly what their job needs - nothing more.
Before you start
You need a role that can manage users (an admin, by default). User and role management lives under Settings.
Step 1 - Invite a colleague
- Open Settings → Team Members.
- Add the person by email.
- Assign them a role.
- Save - they'll get access to your workspace under that role.
Step 2 - Choose (or create) the right role
Roles are managed under Settings → Roles & Permissions. You can use an existing role or create a new one with a name (for example, "Quality Manager"), a short description, and a tailored set of permissions.
Because permissions are granular, you can, for example, let a warehouse operator receive stock and move it without giving them access to costs, billing, or user management.
Step 3 - Review who has access
Return to Settings → Team Members any time to see everyone in the workspace and change or remove a role.
Tips
- Give people the least access they need to do their job, then widen it if required.
- Create role templates that match your real job titles so onboarding a new hire is one click.
FAQ
Can one person belong to more than one workspace?
Yes. A user can have a role in multiple workspaces and switch between them.
How do I stop someone's access?
Remove their role in Settings → Team Members. Learn more in Roles & permissions explained.