How do I set user permissions by department?

Apus manages access with role-based access control (RBAC). This article shows how to create roles, assign them by department and control data scope.

The permission model

Apus uses role-based access control: each role is a set of permissions across modules and data scope. Users get permissions through roles, not individual grants.

Create a role

1. Go to Admin → Roles & permissions.
2. Create a new role and select the allowed modules.
3. Limit data scope by company, branch or department.
4. Save and assign the role to users.

Assign by department

Assigning roles by department lets users see only the data within their scope. When someone changes department, you simply change their role and access updates automatically.

Review & audit

Every permission change is recorded in the audit log. You can review who has what access and when it changed.