Role Definitions

EZY Portal uses a hierarchical role-based access control system to manage permissions.

Role Types

• Super User (System Admin): Global administrators with access to system-wide settings, multi-tenant management, and core infrastructure configuration.
• Tenant Admin User (Tenant Superuser): Administrators responsible for a specific tenant. They manage tenant-specific configurations, users, and customizations.
• Account Admin: Administrators with limited scope, typically managing specific accounts or departments within a tenant.

Tenant Context

Users with access to more than one tenant work inside the currently selected tenant context. Tenant-scoped pages, records, menu entries, and permissions are evaluated against that active tenant. System administrators can access system-level administration areas separately from tenant business modules.

Permission Model

Roles provide the broad access level, while individual module permissions control the exact actions available on each page. If a button or page is not visible, the usual causes are:

• The current tenant does not have the module enabled.
• The current role does not include the required module permission.
• The menu item is hidden by tenant menu customization.
• The page is only available in system administration context.

Use Settings → General → Users and Settings → General → Authorization Groups to manage tenant users and permission groups.

:::tip Related pages See Users for user administration and Authorization Groups for permission grouping. :::