RBAC Permission Matrix

Business API (25 domains) ✓ 167 ✗ 124 ⚠ 177 gaps ▼

Contacts (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗
GETGET /{id}	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗

Products (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗
GETGET /{id}	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗
GETGET search	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗

Inventory (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET warehouses	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET low-stock	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗

Finance (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET accounts	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗
GETGET account by id	404	404	404	404	404	404	404	404	404	404

ChartOfAccounts (2 endpoints) — 14 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET group	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET leaf nodes	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

BankReconcile (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET transactions	404	404	404	404	404	404	404	404	404	404

BookOfAccounts (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET by txn id	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗

WithholdingTax (4 endpoints) — 28 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

PaymentSlip (4 endpoints) — 32 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

FixedAsset (3 endpoints) — 21 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET categories	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Purchase (4 endpoints) — 28 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Transfer (1 endpoints) — 3 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP

Settings (2 endpoints) — 10 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET period-settings	✓	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTGET locking-period status	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

JournalEntry (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
GETGET /{id}	SERVER ERR	✗	SERVER ERR	✗	✗	✗	✗	✗	✗	✗
POSTPOST create	404	404	404	404	404	404	404	404	404	404

BankingChannel (3 endpoints) — 16 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET channels	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET accounts	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	SERVER ERR	SERVER ERR	SERVER ERR	✗	✗	✗	✗	✗	✗	✗

WarehouseManagement (2 endpoints) — 3 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗

MultiCurrency (2 endpoints) — 8 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET currencies	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET currency-rate	404	404	404	404	404	404	404	404	404	404

Project (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL

SupplierInvoice (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
GETGET /{id}	404	404	404	404	404	404	404	404	404	404
POSTPOST create	404	404	404	404	404	404	404	404	404	404

ETaxDocument (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
POSTPOST create	404	404	404	404	404	404	404	404	404	404

BankTransfer (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST transfer	SERVER ERR	✗	SERVER ERR	✗	✗	✗	✗	✗	✗	✗
POSTPOST topup	SERVER ERR	✗	SERVER ERR	✗	✗	✗	✗	✗	✗	✗
POSTPOST paynow confirm	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR

Audit (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
GETGET detail/0	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL

ContactsWrite (3 endpoints) — 6 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗
PUTPUT update/0	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✗	✗	✗
DELETEDELETE /0	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗

ProductsWrite (2 endpoints) — 8 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST create	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✗	✗	✗
DELETEDELETE /0	⚠ VAL	⚠ GAP	⚠ GAP	✗	✗	✗	✗	✗	✗	✗

WarehouseWrite (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
PUTPUT update/0	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
DELETEDELETE /0	SERVER ERR	SERVER ERR	SERVER ERR	✗	✗	✗	✗	✗	✗	✗

Payroll API (9 domains) ✓ 18 ✗ 26 ⚠ 6 gaps ▼

Payroll (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET employee all	✓	✗	✓	✗	✗	✗	✗	✓	✓	✗
GETGET employee count	✓	✗	✓	✗	✗	✗	✗	✓	✓	✗
GETGET employee list	405	405	405	405	405	405	405	405	405	405

PayrollSettings (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET setting	✓	✗	✓	✗	✗	✗	✗	✓	✗	✗

LeaveManagement (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET leave-adjustments	404	404	404	404	404	404	404	404	404	404
GETGET leave-transactions	404	404	404	404	404	404	404	404	404	404

HolidaySettings (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET holidays	404	404	404	404	404	404	404	404	404	404

PayrollDashboard (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET dashboard	404	404	404	404	404	404	404	404	404	404

EmployeeImport (1 endpoints) — 6 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET batch-history	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✓	✓	⚠ GAP

CalendarSettings (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET calendar-master	404	404	404	404	404	404	404	404	404	404

Tawi50 (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415

KConnect (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET register	⚠ VAL	✗	✗	✗	✗	✗	✗	⚠ VAL	⚠ VAL	✗

Report API (11 domains) ✓ 22 ✗ 111 ⚠ 7 gaps ▼

SalesReport (4 endpoints) — 4 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST sales report	⚠ VAL	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTPOST salesByProduct report	⚠ VAL	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTPOST salesByCustomer report	⚠ VAL	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTPOST salesByPerson report	⚠ VAL	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗

ExpenseReport (3 endpoints) — 3 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST expense report	⚠ VAL	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTPOST inputTax report	✓	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTPOST paymentSlip report	✓	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗

AccountingReport (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST profit-and-loss report	405	405	405	405	405	405	405	405	405	405
POSTPOST trial-balance report	404	404	404	404	404	404	404	404	404	404
POSTPOST balance-sheet report	404	404	404	404	404	404	404	404	404	404

PurchaseReport (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST purchase report	⚠ VAL	✗	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
POSTPOST purchaseTax report	⚠ VAL	✗	⚠ VAL	✗	✗	✗	✗	✗	✗	✗

InventoryReport (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST stocks report	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗
POSTPOST product report	404	404	404	404	404	404	404	404	404	404

WHTReport (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST wht report	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗

ReportDashboard (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET outstanding-payments	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415	HTTP:415

PayrollReport (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST payroll report	✓	✗	✓	✗	✗	✗	✗	✓	✗	✗
POSTPOST payroll summary report	404	404	404	404	404	404	404	404	404	404

GLReport (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST accountpayable report	⚠ VAL	✗	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
POSTPOST accountreceivable report	⚠ VAL	✗	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
POSTPOST close-period report	405	405	405	405	405	405	405	405	405	405

ContactsReport (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST contacts report	404	404	404	404	404	404	404	404	404	404

ProjectReport (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST projects report	404	404	404	404	404	404	404	404	404	404

Profile API (6 domains) ✓ 53 ✗ 17 ▼

MyCompany (4 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET company	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗
GETGET consent	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET logo	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET user list	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗

MyCompanyMember (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET me	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET dashboard	405	405	405	405	405	405	405	405	405	405

DocumentTemplate (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET templates	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET default	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET title setting	405	405	405	405	405	405	405	405	405	405

Subscription (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET subscription	404	404	404	404	404	404	404	404	404	404

FileUpload (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET signature	404	404	404	404	404	404	404	404	404	404

FeatureEnrollment (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET features	404	404	404	404	404	404	404	404	404	404

Documents (9 domains) ✓ 259 ✗ 0 ⚠ 281 gaps ▼

Quotation (6 endpoints) — 28 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

TaxInvoice (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Receipt (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

CashInvoice (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

CreditNote (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

DebitNote (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

PurchaseOrder (6 endpoints) — 41 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Expense (6 endpoints) — 38 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

BillingNote (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

RBAC Permission Matrix

Role Summary