Branch Access Control
Branch Access Control in EquiBillBook allows you to manage which users can access which branches and what operations they can perform. This guide explains how to configure and manage branch access permissions.
Understanding Branch Access Control
Branch access control enables you to:
- Restrict user access to specific branches
- Control what operations users can perform at each branch
- Maintain security and data segregation
- Assign branch managers and staff
- Set up role-based access for branches
- Monitor user access across branches
Access Control Levels
EquiBillBook supports different access levels:
1. Full Access
- Access: Complete access to all branch operations
- Can Do: All transactions, settings, reports
- Typical Users: Branch managers, administrators
2. Limited Access
- Access: Access to specific operations only
- Can Do: Selected transactions and reports
- Typical Users: Staff members, cashiers
3. Read-Only Access
- Access: View-only access to branch data
- Can Do: View reports, transactions, but cannot modify
- Typical Users: Auditors, supervisors
4. No Access
- Access: No access to the branch
- Can Do: Cannot view or access branch data
- Typical Users: Users not assigned to branch
Accessing Branch Access Control
To configure branch access control:
- Navigate to Settings → User Settings → User Management
- Select a user or go to Settings → Location Settings → Branch Management
- Click on a branch and select "Access Control" or "User Access"
- You'll see the access control configuration page
Assigning Users to Branches
To assign a user to a branch:
Method 1: From User Management
- Go to User Management
- Select the user you want to assign
- Click "Edit" or "Branch Access"
- Select branches the user can access
- Set access level for each branch
- Save the changes
Method 2: From Branch Management
- Go to Branch Management
- Select the branch
- Click "User Access" or "Assign Users"
- Select users to assign to this branch
- Set access level for each user
- Save the assignments
Configuring Access Permissions
For each user-branch combination, configure permissions:
Sales Permissions
- Create Sales: Allow creating sales invoices
- Edit Sales: Allow editing sales invoices
- Delete Sales: Allow deleting sales invoices
- View Sales: Allow viewing sales transactions
- Print Sales: Allow printing invoices
- Sales Reports: Access to sales reports
Purchase Permissions
- Create Purchases: Allow creating purchase bills
- Edit Purchases: Allow editing purchase bills
- Delete Purchases: Allow deleting purchase bills
- View Purchases: Allow viewing purchase transactions
- Purchase Reports: Access to purchase reports
Inventory Permissions
- View Stock: View stock levels
- Adjust Stock: Create stock adjustments
- Transfer Stock: Transfer stock between branches
- Stock Reports: Access to stock reports
Financial Permissions
- View Accounts: View account information
- Create Payments: Record payments
- Financial Reports: Access to financial reports
- Journal Entries: Create journal entries
Settings Permissions
- Branch Settings: Modify branch settings
- User Management: Manage users for branch
- Configuration: Change branch configuration
Branch Manager Assignment
Assigning a branch manager:
Branch Manager Role
- Full Access: Branch managers typically have full access
- User Management: Can manage users for their branch
- Settings Control: Can modify branch settings
- Reports Access: Full access to branch reports
Assigning Branch Manager
- Go to branch details
- Click "Assign Manager" or "Set Branch Manager"
- Select the user to be branch manager
- Confirm the assignment
- Manager will have full access to the branch
Bulk User Assignment
Assign multiple users to a branch at once:
Bulk Assignment Process
- Go to branch access control
- Click "Bulk Assign" or "Assign Multiple Users"
- Select multiple users using checkboxes
- Set default access level
- Apply to all selected users
- Save the assignments
Access Control Rules
Configure access control rules:
Default Access Rules
- New User Default: Default access for new users
- New Branch Default: Default access when creating new branch
- Inheritance Rules: How permissions are inherited
Restriction Rules
- Cross-Branch Restrictions: Prevent access to other branches
- Time-Based Access: Restrict access by time
- IP Restrictions: Restrict access by IP address
Viewing Access Control
To view current access control settings:
By User
- Go to user details
- Click "Branch Access" tab
- View all branches user can access
- See access level for each branch
By Branch
- Go to branch details
- Click "User Access" tab
- View all users with access
- See access level for each user
Modifying Access Control
To change access permissions:
Updating User Access
- Go to user or branch access control
- Find the user-branch combination
- Click "Edit" or modify permissions
- Update access level or permissions
- Save the changes
Removing Access
- Go to access control settings
- Find the user-branch assignment
- Click "Remove Access" or "Revoke Access"
- Confirm removal
- User will lose access to the branch
Access Control Reports
Generate reports on access control:
Available Reports
- User Access Report: Shows all users and their branch access
- Branch Access Report: Shows all users for each branch
- Permission Report: Detailed permission breakdown
- Access Log: History of access changes
Best Practices
- Principle of Least Privilege: Grant minimum necessary access
- Regular Review: Periodically review access permissions
- Role-Based Access: Use roles to manage permissions
- Document Access: Keep records of access assignments
- Remove Unused Access: Remove access when users leave or change roles
- Test Access: Test access control before going live
- Monitor Access: Monitor user access patterns
Common Scenarios
Scenario 1: Setting Up Branch Staff
Assigning staff to a new branch:
- Create user accounts for staff
- Assign users to the branch
- Set appropriate access levels
- Configure sales/inventory permissions
- Test access for each user
- Train users on their permissions
Scenario 2: Restricting Access
Restricting a user's access to specific branches:
- Go to user access control
- Remove access to unwanted branches
- Verify remaining access
- Test that access is properly restricted
Scenario 3: Promoting to Branch Manager
Promoting a user to branch manager:
- Go to branch details
- Assign user as branch manager
- Grant full access permissions
- Enable user management permissions
- Verify manager has all necessary access
Troubleshooting
Issue: User Cannot Access Branch
Possible Causes:
- User not assigned to branch
- Access level too restrictive
- Branch is inactive
- Permission issues
Solution: Assign user to branch, check access level, verify branch status, review permissions
Issue: User Has Too Much Access
Possible Causes:
- Access level set too high
- Incorrect permissions assigned
- Role has excessive permissions
Solution: Review and reduce access level, adjust permissions, modify role permissions
What's Next?
After configuring branch access control, you should:
- Test access for all users
- Train users on their permissions
- Monitor access patterns
- Review access regularly
- Update access as roles change
- Set up access control reports
Proper branch access control ensures security and proper data segregation across your multi-branch operations in EquiBillBook.