Beelocity’s access control is layered — start simple with roles and permissions, then add more granularity as your organization grows and your needs become more specific. Each layer narrows what the previous one allows.
| Layer | What it does | Example |
|---|---|---|
| Roles & Permissions | Broad access grants — the foundation | “Inventory Clerk can view and edit products” |
| Policies (ABAC) | Conditional rules on top of roles | “Can only approve POs under 2,000,000 DA” |
| Row Access Rules | Filter which records a user sees | “Only sees stock in their assigned warehouse” |
| Field Visibility & Editability | Hide or lock specific fields per role | “Cost price hidden from sales staff” |
| Hierarchy & Delegations | Org structure and temporary permission sharing | “Manager can delegate approval rights while on leave” |
A denied action at any layer stays denied — layers are cumulative restrictions, not overrides.
Where to Start
Most organizations only need roles and permissions. The Organization Owner role is created automatically for whoever creates the organization — it has full access and cannot be deleted. From there, create the roles your team actually needs (e.g., “Warehouse Supervisor”, “Procurement Manager”, or your own “Admin” / “Member” variants) and assign permissions accordingly.
Add the other layers only when you have a concrete need:
- Policies — when you need conditional rules like monetary thresholds or segregation of duties.
- Row access — when different users should see different subsets of data.
- Field rules — when certain fields contain sensitive information that not everyone should see or edit.
- Hierarchy and delegations — when you need formal reporting structures or temporary permission sharing.
Where to Find It
Access control lives in Settings, not the sidebar — the sidebar is for running the business, Settings is for administering it. Click your user avatar in the top corner and choose Settings.
The business navigation on the left is then replaced by the administration menu, which groups every access control screen into four blocks:
| Block | Screens |
|---|---|
| Members & Roles | Members, Invitations, Roles |
| Permissions | Policies, Approval Workflows, Row Access, Field Visibility, Field Editability |
| Structure | Hierarchy, User Assignments, Delegations |
| Monitoring | The read-only timeline of every authoritative action in your organization |
Pick an entry and it opens on the right, with the menu staying put so you can move between screens freely. Back to app at the top of the menu returns you to the business navigation.
You only see the screens your permissions allow. If a block you expect is missing, ask an owner or administrator to grant you the matching permission. You can also jump to any of these screens straight from the command palette with Ctrl+K.