Roles and permissions

Channel, location and action scopes with independent commercial and refund decisions.

Permissions

Summarised from the authored role permissions. Scope restrictions such as “own records” still apply; these symbols do not indicate completeness or runtime access.

Table	Order Desk	Order Manager	Inventory Planner	Fulfilment Operator	Returns Inspector	Finance Reviewer	Integration Operator
master
`Channels`	Manage / maintain: Manage Draft Orders and OrderLines within assigned Channels	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage test Channels and authorised connector configuration
`Products`	No table-specific permission stated	No table-specific permission stated	View: View Products Locations and accepted InventorySnapshots	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Locations`	No table-specific permission stated	No table-specific permission stated	View: View Products Locations and accepted InventorySnapshots	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`PriceRules`	No table-specific permission stated	Manage / maintain: Maintain active PriceRules under change review	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`OrderLines`	Manage / maintain: Manage Draft Orders and OrderLines within assigned Channels	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`FulfilmentLines`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View scoped Fulfilments and FulfilmentLines	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`ReturnLines`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View approved ReturnAuthorizations and ReturnLines	No table-specific permission stated	No table-specific permission stated
`RefundRequests`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Specific actions: Approve or reject RefundRequests for another requester at the exact revision	No table-specific permission stated
transaction
`InventorySnapshots`	No table-specific permission stated	No table-specific permission stated	View: View Products Locations and accepted InventorySnapshots	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Orders`	Manage / maintain: Manage Draft Orders and OrderLines within assigned Channels	View: View scoped Orders and OrderReviews	View: View scoped Orders and Fulfilments	No table-specific permission stated	No table-specific permission stated	View: View Orders PaymentEvents and return evidence	No table-specific permission stated
`IntakeEvents`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View redacted IntakeEvents and IntegrationMessages
`OrderReviews`	Specific actions: Submit OrderReviews and ChangeRequests	Specific actions: View scoped Orders and OrderReviews; Approve or reject OrderReviews for another requester at the current revision	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Reservations`	No table-specific permission stated	No table-specific permission stated	Specific actions: Create or release Reservations through the stock authority	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Backorders`	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage Backorders and supply evidence	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Fulfilments`	No table-specific permission stated	No table-specific permission stated	View: View scoped Orders and Fulfilments	Specific actions: View scoped Fulfilments and FulfilmentLines; Release eligible Draft Fulfilments within current reserved quantities	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Shipments`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Specific actions: Record Shipments and evidence	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`ReturnAuthorizations`	No table-specific permission stated	Specific actions: Approve ChangeRequests and ReturnAuthorizations within policy	No table-specific permission stated	No table-specific permission stated	View: View approved ReturnAuthorizations and ReturnLines	No table-specific permission stated	No table-specific permission stated
`ReturnInspections`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Specific actions: Create ReturnInspections with receipt evidence only at authorised ReceivingLocation	No table-specific permission stated	No table-specific permission stated
`IntegrationMessages`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View redacted IntakeEvents and IntegrationMessages
`ChangeRequests`	Specific actions: Submit OrderReviews and ChangeRequests	Specific actions: Approve ChangeRequests and ReturnAuthorizations within policy	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`PromiseHistory`	Specific actions: Record PromiseHistory customer responses	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`SubstitutionRequests`	No table-specific permission stated	Specific actions: Approve consented SubstitutionRequests	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`ReconciliationRuns`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Specific actions: Run ReconciliationRuns and record external evidence
finance
`PaymentEvents`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View Orders PaymentEvents and return evidence	No table-specific permission stated

Order DeskView stock and fulfilment statusCannot approve own requests or send refunds
Order ManagerCannot approve own requests or override stock invariants
Inventory PlannerCannot fabricate stock snapshots or force negative availabilityCannot approve commercial exceptions
Fulfilment OperatorConfirm picking and packing within reserved quantitiesProcess warehouse cancellation acknowledgementsView delivery-address snapshots for assigned workCannot change order prices or payment stateCannot ship cancelled or unreserved quantities
Returns InspectorPropose correction inspections with traceable historyConfirm restock or quarantine dispositionCannot approve return exceptions or refundsCannot mark goods sellable before accepted inspection
Finance ReviewerReview payment and credit reconciliation exceptionsAuthorise configured refund dispatch only after required approvalExport approved credit handoffsCannot treat a pending provider call as settled money
Integration OperatorDispatch only authorised immutable messages and retry them with their original CommandKeyQuarantine conflicting source eventsCannot approve business exceptions or edit captured amountsCannot store credentials in business records

Manage / maintain View Specific actions— No table-specific permission statedPermissions also apply to agents

How permissions work

7 rules

Keep applied intake, shipment, approval and payment evidence as append-only history across screen actions, exports and agent work. Corrections link to earlier records and explain their effects.

Scope reads, writes, exports and agent calls by channel and location. A filtered interface is not a security boundary; the server must enforce the same rules on direct API requests.

Order Desk prepares customer requests. Order Manager decides order risk, price exceptions, substitutions and return eligibility for a different requester at the current revision.

Finance Reviewer independently decides refund amounts. Approval authority is separate from transport access, and a person cannot satisfy independence by switching roles on the same identity.

Inventory Planner can reserve eligible stock through the configured authority. The role cannot fabricate inventory or bypass a negative-availability check.

Fulfilment Operator confirms only assigned location work. Returns Inspector records receipt, condition and disposition. Neither gains authority to change order prices or approve refunds.

Integration Operator can configure authorised mappings, retry unchanged commands and reconcile outcomes. Provider credentials remain outside business records, and retries do not grant new business authority.

Admin manages identities and reviewed configuration. Business actions require the explicit business role and all normal independence and revision checks. Administrative access cannot erase applied events or decisions.

The roles

Order Desk

Owns customer requests, source corrections and evidence of customer agreement.

Permissions and screens

Manage Draft Orders and OrderLines within assigned Channels
View stock and fulfilment status
Submit OrderReviews and ChangeRequests
Apply current approved ChangeRequests only through the controlled transition
Request ReturnAuthorizations and RefundRequests
Record PromiseHistory customer responses
Propose SubstitutionRequests
Cannot approve own requests or send refunds

Open OrdersPendingReview

Order NumberChannelCustomerStatus

Ready

Intake ExceptionsConflict

Intake NumberChannelExternal Order IDStatus

Conflict

Allocation QueueOpen

Backorder NumberOrder LineQuantityResolution

Alternative Location

Order Manager

Decides order risk, price exceptions and customer-facing amendments.

Permissions and screens

View scoped Orders and OrderReviews
Approve or reject OrderReviews for another requester at the current revision
Approve ChangeRequests and ReturnAuthorizations within policy
Approve consented SubstitutionRequests
Maintain active PriceRules under change review
Cannot approve own requests or override stock invariants
Cannot approve or send RefundRequests

Order Approval InboxSubmitted

Review NumberOrderOrder RevisionReason

Price Override

Commercial Change InboxSubmitted

Change NumberOrderChange TypeOrder Revision

Change Address

Open OrdersPendingReview

Order NumberChannelCustomerStatus

Ready

Order Approval InboxOrderReviews

Submitted

OR-47018 ORD-79124 230 10 d
OR-22829 ORD-75020 850 14 d
OR-49716 ORD-49828 570 5 d
OR-65444 ORD-36726 250 12 d
OR-38297 ORD-64909 660 7 d

OR-47018

Order: ORD-79124
OrderRevision: 230
Reason: PaymentRisk
RequestedBy: XT
AssignedReviewer: TL

Review order exception waits for the order manager.

Illustrative preview · actions are unavailable here.

Inventory Planner

Allocates stock and manages uncovered demand.

Permissions and screens

View Products Locations and accepted InventorySnapshots
Create or release Reservations through the stock authority
Prepare Draft Fulfilments and FulfilmentLines within current reservations
Manage Backorders and supply evidence
Propose PromiseHistory
View scoped Orders and Fulfilments
Cannot fabricate stock snapshots or force negative availability
Cannot approve commercial exceptions

Warehouse ScheduleReleased

Fulfilment NumberLocationOwnerPlanned Start

Open OrdersPendingReview

Order NumberChannelCustomerStatus

Ready

Allocation QueueOpen

Backorder NumberOrder LineQuantityResolution

Alternative Location

Warehouse ScheduleFulfilments

StatusReleasedAcceptedPickingPacked

Fulfilment Operator

Confirms warehouse work and shipment evidence for assigned locations.

Permissions and screens

View scoped Fulfilments and FulfilmentLines
Release eligible Draft Fulfilments within current reserved quantities
Confirm picking and packing within reserved quantities
Record Shipments and evidence
Process warehouse cancellation acknowledgements
View delivery-address snapshots for assigned work
Cannot change order prices or payment state
Cannot ship cancelled or unreserved quantities

Warehouse ScheduleReleased

Fulfilment NumberLocationOwnerPlanned Start

Shipment TrackingDispatched

Shipment NumberFulfilmentCarrierTracking Number

Fulfilment BoardReleased

Fulfilment NumberOrderLocationStatus

Accepted

Warehouse ScheduleFulfilments

StatusReleasedAcceptedPickingPacked

Returns Inspector

Receives returned goods and records their condition.

Permissions and screens

View approved ReturnAuthorizations and ReturnLines
Create ReturnInspections with receipt evidence only at authorised ReceivingLocation
Propose correction inspections with traceable history
Confirm restock or quarantine disposition
Cannot approve return exceptions or refunds
Cannot mark goods sellable before accepted inspection

Return ReceivingApproved

RMANumberOrderReasonExpected Date

Incorrect Item

Return Inspection QueuePartReceived

Return AuthorizationOrder LineReceived QuantityAccepted Quantity

Finance Reviewer

Approves bounded refund instructions and reconciles financial outcomes.

Permissions and screens

View Orders PaymentEvents and return evidence
Approve or reject RefundRequests for another requester at the exact revision
Review payment and credit reconciliation exceptions
Authorise configured refund dispatch only after required approval
Export approved credit handoffs
Cannot alter verified PaymentEvents or approve own requests
Cannot treat a pending provider call as settled money

Refund Approval InboxSubmitted

Refund NumberOrderAmountCurrency

Refund ReconciliationSending

Refund NumberOrderAmountProvider Refund ID

Reconciliation ExceptionsException

Reconciliation NumberChannelScopeWindow Start

Stock

Refund Approval InboxRefundRequests

Submitted

RR-26039 ORD-21377 470 3 d
RR-15043 ORD-63033 740 6 d
RR-91566 ORD-79359 770 12 d
RR-80673 ORD-77233 850 12 d
RR-56412 ORD-87314 770 3 d

RR-26039

Order: ORD-21377
Amount: 770
Currency: CRR-495
RequestedBy: RZ
Revision: 470

Review refund request waits for the finance reviewer.

Illustrative preview · actions are unavailable here.

Integration Operator

Maintains mappings and resolves transport and reconciliation failures.

Permissions and screens

Manage test Channels and authorised connector configuration
View redacted IntakeEvents and IntegrationMessages
Dispatch only authorised immutable messages and retry them with their original CommandKey
Run ReconciliationRuns and record external evidence
Quarantine conflicting source events
Cannot approve business exceptions or edit captured amounts
Cannot store credentials in business records