User Roles & Permissions
NexosOne DMS uses a comprehensive role-based access control (RBAC) system to manage user access and permissions.
Role System
Users are assigned roles, and roles have specific permissions that control what features and data users can access.
Common Roles
Service Manager
Level: 70
Full service and workshop management access:
- Full DMS access (all sections)
- Service, Workshop, POS, Parts (view/search/add to jobs/issue)
- Customers, Technicians
- Service history, templates, reminders, calendar, VHC
- Technician management and time records
- Reports (workshop, service)
- Excludes: Financial/payroll, parts stock take, parts reports, DMS settings
Service Advisor
Level: 50
POS access and customer service operations:
- DMS Dashboard
- POS (create/edit Service & Parts WIPs, invoice, payment)
- Workshop (view/create/edit jobs, check-in/out, dashboard)
- Parts (view inventory, search, add to jobs, issue parts)
- Service (view history, templates, manage reminders & calendar, create VHC)
- Customers (view/create/edit, manage vehicles, communication)
- Technicians (view only)
- Reports (workshop, service)
Parts Manager
Level: 65
Full parts inventory management:
- All parts permissions (inventory, stock adjustments, stock take, suppliers, purchase orders, booking, reports)
- Parts stock management
- Purchase order creation and management
- Supplier management
- Parts booking and receiving
- Parts reporting
Technician
Level: 30
Workshop operations and clocking:
- Technician Portal access
- View assigned jobs
- Clock on/off to jobs
- View job details
- Update job status
- Time recording
Permission Structure
Permissions are organised by module:
- dms.* - General DMS access
- dms.pos.* - Point of Sale access
- dms.workshop.* - Workshop operations
- dms.parts.* - Parts management
- dms.service.* - Service management
- dms.customers.* - Customer management
- dms.technicians.* - Technician management
- dms.financial.* - Financial operations
- dms.reports.* - Reporting access
Access Control Features
- Permission-based menu display (users only see features they can access)
- Data filtering based on user permissions
- Action restrictions (view, create, edit, delete)
- Location-based access (multi-location support)
Audit Trail
All user actions are logged:
- User ID and name
- Action performed
- Timestamp
- Data changes (before/after values)
- IP address and location