---
title: "Access Control"
description: "Beelocity's access control is layered — start simple with roles and permissions, then add more granularity as your organization grows and your needs become more specific."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.beelocity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Control

Beelocity's access control is **layered** — start simple with roles and permissions, then add more granularity as your organization grows and your needs become more specific. Each layer narrows what the previous one allows.

| Layer                                                                     | What it does                                   | Example                                               |
| ------------------------------------------------------------------------- | ---------------------------------------------- | ----------------------------------------------------- |
| **[Roles & Permissions](roles-and-permissions.html)**                       | Broad access grants — the foundation           | "Inventory Clerk can view and edit products"          |
| **[Policies (ABAC)](policies.html)**                                        | Conditional rules on top of roles              | "Can only approve POs under 2,000,000 DA"             |
| **[Row Access Rules](row-access-rules.html)**                               | Filter which records a user sees               | "Only sees stock in their assigned warehouse"         |
| **[Field Visibility & Editability](field-visibility-and-editability.html)** | Hide or lock specific fields per role          | "Cost price hidden from sales staff"                  |
| **[Hierarchy & Delegations](hierarchy-and-delegations.html)**               | Org structure and temporary permission sharing | "Manager can delegate approval rights while on leave" |

A denied action at any layer stays denied — layers are cumulative restrictions, not overrides.

## Where to Start

**Most organizations only need roles and permissions.** The Organization Owner role is created automatically for whoever creates the organization — it has full access and cannot be deleted. From there, create the roles your team actually needs (e.g., "Warehouse Supervisor", "Procurement Manager", or your own "Admin" / "Member" variants) and assign permissions accordingly.

Add the other layers only when you have a concrete need:

- **Policies** — when you need conditional rules like monetary thresholds or segregation of duties.
- **Row access** — when different users should see different subsets of data.
- **Field rules** — when certain fields contain sensitive information that not everyone should see or edit.
- **Hierarchy and delegations** — when you need formal reporting structures or temporary permission sharing.

## Where to Find It

Access control lives in **[Settings](../getting-started/settings.html)**, not the sidebar — the sidebar is for running the business, Settings is for administering it. Click your **user avatar** in the top corner and choose **Settings**.

The business navigation on the left is then replaced by the administration menu, which groups every access control screen into four blocks:

| Block               | Screens                                                                                   |
| ------------------- | ----------------------------------------------------------------------------------------- |
| **Members & Roles** | Members, Invitations, Roles                                                               |
| **Permissions**     | Policies, Approval Workflows, Row Access, Field Visibility, Field Editability             |
| **Structure**       | Hierarchy, User Assignments, Delegations                                                  |
| **Monitoring**      | [The read-only timeline](audit-log.html) of every authoritative action in your organization |

Pick an entry and it opens on the right, with the menu staying put so you can move between screens freely. **Back to app** at the top of the menu returns you to the business navigation.

You only see the screens your permissions allow. If a block you expect is missing, ask an owner or administrator to grant you the matching permission. You can also jump to any of these screens straight from the [command palette](../getting-started/command-palette.html) with `Ctrl+K`.

Source: https://docs.beelocity.com/en/access-control/index.mdx