Role & Permission Management
##API ENDPOINT /role-and-permission
Overview
The Role & Permission Management page is used to create user roles and assign permissions to each role.
Permissions control what actions a role can perform on each page in the system, such as viewing, reading, adding, editing, or deleting data.
This module ensures secure access control and helps administrators manage system usage effectively.
Access Restriction:
This page is accessible only to Super Admin users.
Role List Page
This page displays all available roles in the system.
Columns Explained
| Column | Description |
|---|---|
| S No | Serial number of the role |
| Role | Name of the role (e.g., superAdmin, user) |
| Status | Indicates whether the role is active |
| Actions | View permissions or delete the role |
Available Actions
- Add Role – Create a new role and assign permissions
- View – View or edit permissions assigned to a role
- Delete – Remove a role from the system
❗ Default roles like superAdmin should not be deleted.
Add / Edit Role Page
This page is used to create a new role or update permissions for an existing role.
Role Details Section
Role
- Select an existing role or create a new role
- Role name should be unique
Status
- Checked → Role is active
- Unchecked → Role is inactive (cannot be used)
Permission Management Section
Permissions are assigned page-wise and action-wise.
Permission Types
Each page supports the following permissions:
| Permission | Description |
|---|---|
| View | Access the page |
| Read | Read-only access |
| Add | Add new records |
| Edit | Modify existing records |
| Delete | Delete records |
Permission Controls
You can quickly assign permissions using action buttons:
- View All – Enable View permission for all pages
- Read All – Enable Read permission for all pages
- Add All – Enable Add permission for all pages
- Edit All – Enable Edit permission for all pages
- Delete All – Enable Delete permission for all pages
- Select All – Enable all permissions for all pages
- Deselect All – Remove all permissions
Page-wise Permission Table
Each row represents a system page.
| Column | Description |
|---|---|
| Page | Name or route of the page |
| View | Allow page access |
| Read | Allow read-only access |
| Add | Allow adding data |
| Edit | Allow editing data |
| Delete | Allow deleting data |
Permissions can be selected individually per page.
Search Permissions
- Use the Search permissions input to quickly find a specific page
- Useful when the system has many pages
Save & Close
- After assigning permissions, save the role
- Click Close to return to the role list
Best Practices
- Grant minimum required permissions to each role
- Avoid assigning Delete permissions unless necessary
- Keep superAdmin permissions unchanged
- Regularly review roles and permissions for security
Summary
The Role & Permission Management module provides:
- Centralized role creation
- Page-level permission control
- Secure access management
- Better system governance
This module plays a critical role in maintaining data security and access control across the applicatio