Skip to content
Decide who may open what, across companies and branches · presentation 3 of 5 · for the whole-system operator — you run the books Read the transcript · Back to the series

These slides need JavaScript to advance one at a time. Without it every slide is shown below, one after another, each with its own player — or read the transcript, which carries the same steps and every word.

Decide who may open what, across companies and branches · presentation 3 of 5

Everything hangs off a role

You can trace any BigLedger access question from the person to the grant, know which of the two permission systems you are in…

The chain

Step 1 — Walk the chain once, in the direction the server walks it

You will know where to start looking.

Screen capture pending the demo tenant

Tenant Admin, Tenant Roles, the listing with No. of Users and No. of Teams

Step 2 — Accept that there is no way to take something away

You will design roles differently.

Where this step sits
    flowchart TD
  s1["1. Walk the chain once…"]
  s2["2. Accept that there is no way…"]
  s3["3. Notice which of the two permission…"]
  s4["4. Learn to spot a grant that…"]
  s5["5. Know what leaves no trace"]
  s6["6. Check what a person actually holds…"]
  s1 --> s2
  s2 --> s3
  s3 --> s4
  s4 --> s5
  s5 --> s6
  classDef here fill:#1e40af,stroke:#1e40af,color:#ffffff,font-weight:bold;
  class s2 here;

The other list

Step 3 — Notice which of the two permission systems you are in

You will stop granting things in the wrong place.

Screen capture pending the demo tenant

A role's Applet tab, with Permission Sets and Client-Side Permissions side by side

Step 4 — Learn to spot a grant that grants nothing

You will be less trusting of a tick box.

What you do
  1. Untick *Sales Price Update* and that role's cashiers can still change the price

What you cannot see afterwards

Step 5 — Know what leaves no trace

You will keep your own record.

What this step names
  1. The applet audit trail is genuinely good on documents and on applet…
  2. When
  3. The old value
  4. The new one

Step 6 — Check what a person actually holds, not what you meant to give

You will have a habit worth more than any diagram.

What you do
  1. Read both after every change, because a role that looked right on paper often…

NarrationSlide 1 of 10

Left and right arrows, or the space bar, move between slides; f is full screen and Esc leaves it. Clicking the left or right half of a slide pages it. Play and pause belong to you — nothing moves on by itself unless you tick the box above.