Set up Backoffice authorization

This manual describes how to set up and configure authorization for RetailVista Backoffice. This is also possible for RetailVista POS, please refer to the manual: Setting up POS authorization.

RetailVista Backoffice is designed so that Backoffice users can be assigned to 'security groups'. You can specify and assign permissions to each created group. RetailVista provides standard basic security groups.

Backoffice authorization

Each user is added to a security role. Usually, this is based on a specific employment, so multiple employees with the same employment can be added to the same security role. Security groups are assigned under the security roles. In RetailVista, there are several default groups that can be used, but it is also possible to create new groups. The security groups indicate what the permissions are. This only concerns the allowed and usable components. RetailVista does not work with exclusions.

By adding the security groups to a specific security role, the permissions for this security role are determined. By adding users to the security role, it is determined which users these permissions apply to.

Security groups

A security role can contain one or more security groups. For users who are allowed to log in to the backoffice of RetailVista and the cash register, multiple security groups can be set. These groups can be assigned to a security role.

Example: 1 security group with limited POS rights + 1 security group with limited Backoffice rights. Both are assigned to 1 security role.

The creation of these security groups is explained below.

Extra -> Security Groups

Here you can view, modify, or add security groups. Under the "Permissions" tab, you will find the permissions (what is allowed for that specific security group).

When a certain permission has 'block = no', it means that the right is enabled/allowed.
When a certain permission has 'block = yes', it means that a user assigned to this security group is not allowed to perform that function within the backoffice.

When creating a new security group, it is possible to choose to copy the permissions of an existing security group.

Please note that some permissions still have a translation issue, which will be resolved soon. You can create an entirely new security group or contact us if you want to know which permissions you should copy. It is possible to block different permissions of self-made security groups that need to be excluded. Adding additional rights is also allowed here.

Click on the "Save" icon.

Security Roles

A security role can contain one or more security groups. For users who are allowed to log in to the backoffice of RetailVista and the cash register, multiple security groups can be set. These groups can be assigned to a security role.

Example: 1 security group with limited POS rights + 1 security group with limited Backoffice rights. Both are assigned to 1 security role.

-> Extra -> Security Roles

Here you can view, modify, or add security roles. Under the "Security Groups" tab, you can add a new security group by clicking on "Assign security group to role".

Click on the "Save" icon.If you want to delete a security group, do not use the "Delete" icon in this screen. You need to double-click on the specific security group and then use the "Delete" icon.

On the "Users" tab, you can see which users have this security role in these security groups.

Assigning users to the security role

Extra -> Users

Double-click on the user you want to assign to the newly created security role.
Select the 'Security' tab.
Click on the edit icon and assign the corresponding security role to the user.

You can add the 'Security role description' column to the header of the user screen. This way, you can easily see which security role a user has been assigned, see the image below.

Note

Make changes to these security roles carefully. For example, create a test user who is allowed to log in to the back office, assign the security group (limited) as described above.

Adjust the parameters in the security group until you are completely satisfied with what this test user can and cannot do in the backoffice.

Once that is completed and working as desired, you can assign this security group to other users.

Setting up back office authorization

Extra -> Settings -> Section: Authorization

If this is not enabled, any user who is a website user can use any module that is activated for your company. There are no restrictions. Enable the 'RetailVista website authorization' setting.

Make sure you perform this final step only when all website users are linked to the correct security role.When a website user is not connected to a security role after setup, the respective user cannot use RetailVista product backoffice.