User Roles and Permissions
Configure comprehensive user access control to ensure the right people have access to the right features while maintaining security and operational efficiency.
Overview
DooUMS implements a role-based access control (RBAC) system that allows you to define granular permissions for different user types within your organization. This ensures data security while enabling efficient operations.
Default User Roles
Admin
Full system access with complete administrative privileges.
Permissions Include:
- All system configuration and settings
- User management and role assignment
- Financial data access and modification
- System maintenance and monitoring
- Data export and backup operations
- Package and pricing management
- Complete operational oversight
Typical Users:
- System administrators
- Business owners
- IT managers
Agent
Customer service and booking operations with limited administrative access.
Permissions Include:
- Customer information management
- Booking creation and modification
- Payment processing (restricted amounts)
- Document management
- Basic reporting capabilities
- Communication with customers
- Pilgrim registration and updates
Typical Users:
- Sales agents
- Customer service representatives
- Booking coordinators
Operation
Operational management with oversight capabilities for day-to-day activities.
Permissions Include:
- Booking management and coordination
- Package assignment and scheduling
- Pilgrim group management
- Staff coordination and oversight
- Operational reporting
- Document verification and processing
- Communication with agents and pilgrims
Typical Users:
- Operations managers
- Tour coordinators
- Department supervisors
Finance
Financial operations with specialized access to accounting functions.
Permissions Include:
- Full financial data access
- Payment processing and refunds
- Financial reporting and analytics
- Audit trail access
Typical Users:
- Accountants
- Financial controllers
- Billing specialists
Staff
General staff access with limited operational capabilities.
Permissions Include:
- View pilgrim information
- Basic booking information access
- Document viewing and verification
- Communication with customers (limited)
- Task assignment tracking
- Basic reporting (assigned tasks)
Typical Users:
- Administrative assistants
- Support staff
- Data entry personnel
User
Basic user access for self-service and limited information viewing.
Permissions Include:
- View own profile information
- Access assigned bookings (read-only)
- View assigned pilgrim groups
- Basic communication capabilities
- Document download (assigned documents)
- Self-service portal access
Typical Users:
- External partners
- Limited-access contractors
- Read-only stakeholders
Custom Role Creation
Custom role creation requires system-level configuration and careful permission planning. Please contact Dabudoo Technology support team for assistance in creating and configuring custom roles that meet your specific organizational needs.
Defining Custom Roles
If your organization has unique requirements beyond the default roles, custom roles can be created with specialized permissions:
-
Role Name and Description
- Choose descriptive names (e.g., "VIP Services Coordinator")
- Provide clear role descriptions for future reference
-
Permission Assignment
- Select specific module access permissions
- Define data visibility levels
- Set operational limitations
-
Inheritance and Hierarchy
- Base custom roles on existing templates
- Define reporting relationships
- Establish escalation procedures
Note: The vendor support team will work with you to ensure custom roles are properly configured, tested, and aligned with your security policies and operational workflows.
Permission Categories
Module Access
Control which system modules users can access:
- Pilgrims Management: Customer profiles and information
- Bookings: Reservation creation and management
- Packages: Package configuration and pricing
- Payments: Financial transactions and processing
- Communications: Email, SMS, and notification systems
- Reports: Analytics and business intelligence
- Settings: System configuration and preferences
Data Access Levels
Define what data users can see and modify:
- View Only: Read access without modification capabilities
- Edit: Modify existing records within permissions
- Create: Add new records and entries
- Delete: Remove records (usually restricted)
- Export: Download data for external use
Operational Limits
Set boundaries on user actions:
- Transaction Limits: Maximum payment amounts
- Approval Requirements: Multi-level authorization for certain actions
- Time Restrictions: Access limited to business hours
- IP Restrictions: Location-based access control
Permission Matrix
Core Permissions
| Permission | Admin | Agent | Operation | Finance | Staff | User |
|---|---|---|---|---|---|---|
| View Pilgrims | ✓ | ✓ | ✓ | ✓ | ✓ | Limited |
| Edit Pilgrims | ✓ | ✓ | ✓ | Limited | ✗ | ✗ |
| Create Bookings | ✓ | ✓ | ✓ | ✗ | ✗ | ✗ |
| Process Payments | ✓ | Limited | Limited | ✓ | ✗ | ✗ |
| Access Reports | ✓ | Limited | ✓ | ✓ | Limited | ✗ |
| Manage Users | ✓ | ✗ | Limited | ✗ | ✗ | ✗ |
| System Settings | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ |
Financial Permissions
| Permission | Admin | Agent | Operation | Finance | Staff | User |
|---|---|---|---|---|---|---|
| View Finances | ✓ | Limited | ✓ | ✓ | ✗ | ✗ |
| Process Refunds | ✓ | ✗ | Limited | ✓ | ✗ | ✗ |
| Financial Reports | ✓ | ✗ | ✓ | ✓ | ✗ | ✗ |
| Tax Management | ✓ | ✗ | ✗ | ✓ | ✗ | ✗ |
| Audit Access | ✓ | ✗ | Limited | ✓ | ✗ | ✗ |