Skip to main content

Combining groups

A user can belong to several access groups at once. Their access is the sum of those groups — never the smaller of them. Two rules decide the result.

Permissions add up​

For every kind of record, a user may do anything that any of their groups allows. If one group's profile grants Read on a record and another grants Edit, the user gets both. Permissions are combined with "OR" — they only ever widen.

Warehouse access is added per record type​

Warehouse restrictions combine the same way, but are worked out separately for each kind of record:

  • If any group that grants access to that record type is unrestricted, the user gets all warehouses for it.
  • Otherwise, the user gets the combined list of warehouses from the restricted groups that grant it.

Example​

A user is in two groups:

  • Group A — its profile allows receiving, restricted to Warehouse 1.
  • Group B — its profile allows picking, restricted to Warehouse 2.

The result:

  • At Warehouse 1, the user can do receiving only.
  • At Warehouse 2, the user can do picking only.

Each group keeps its own warehouse limit, and the user simply has both — receiving where Group A applies, picking where Group B applies.