RBAC Permission Matrix

Business API (25 domains) ✓ 167 ✗ 124 ⚠ 177 gaps ▼

Contacts (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗
GETGET /{id}	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗

Products (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗
GETGET /{id}	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗
GETGET search	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗

Inventory (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET warehouses	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET low-stock	✓	✓	✓	✓	✓	✓	✓	✗	✗	✗

Finance (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET accounts	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗
GETGET account by id	404	404	404	404	404	404	404	404	404	404

ChartOfAccounts (2 endpoints) — 14 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET group	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET leaf nodes	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

BankReconcile (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET transactions	404	404	404	404	404	404	404	404	404	404

BookOfAccounts (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET by txn id	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗

WithholdingTax (4 endpoints) — 28 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

PaymentSlip (4 endpoints) — 32 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

FixedAsset (3 endpoints) — 21 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET categories	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Purchase (4 endpoints) — 28 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Transfer (1 endpoints) — 3 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP

Settings (2 endpoints) — 10 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET period-settings	✓	✗	⚠ GAP	✗	✗	✗	✗	✗	✗	✗
POSTGET locking-period status	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

JournalEntry (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
GETGET /{id}	SERVER ERR	✗	SERVER ERR	✗	✗	✗	✗	✗	✗	✗
POSTPOST create	404	404	404	404	404	404	404	404	404	404

BankingChannel (3 endpoints) — 16 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET channels	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET accounts	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	SERVER ERR	SERVER ERR	SERVER ERR	✗	✗	✗	✗	✗	✗	✗

WarehouseManagement (2 endpoints) — 3 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗

MultiCurrency (2 endpoints) — 8 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET currencies	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET currency-rate	404	404	404	404	404	404	404	404	404	404

Project (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL

SupplierInvoice (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
GETGET /{id}	404	404	404	404	404	404	404	404	404	404
POSTPOST create	404	404	404	404	404	404	404	404	404	404

ETaxDocument (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
POSTPOST create	404	404	404	404	404	404	404	404	404	404

BankTransfer (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST transfer	SERVER ERR	✗	SERVER ERR	✗	✗	✗	✗	✗	✗	✗
POSTPOST topup	SERVER ERR	✗	SERVER ERR	✗	✗	✗	✗	✗	✗	✗
POSTPOST paynow confirm	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR	SERVER ERR

Audit (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	404	404	404	404	404	404	404	404	404	404
GETGET detail/0	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL

ContactsWrite (3 endpoints) — 6 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗
PUTPUT update/0	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✗	✗	✗
DELETEDELETE /0	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗

ProductsWrite (2 endpoints) — 8 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST create	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✗	✗	✗
DELETEDELETE /0	⚠ VAL	⚠ GAP	⚠ GAP	✗	✗	✗	✗	✗	✗	✗

WarehouseWrite (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
PUTPUT update/0	⚠ VAL	⚠ VAL	⚠ VAL	✗	✗	✗	✗	✗	✗	✗
DELETEDELETE /0	SERVER ERR	SERVER ERR	SERVER ERR	✗	✗	✗	✗	✗	✗	✗

Payroll API (6 domains) ✓ 15 ✗ 19 ⚠ 6 gaps ▼

Payroll (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET employee all	✓	✗	✓	✗	✗	✗	✗	✓	✓	✗
GETGET employee count	✓	✗	✓	✗	✗	✗	✗	✓	✓	✗
GETGET employee list	405	405	405	405	405	405	405	405	405	405

PayrollSettings (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET setting	✓	✗	✓	✗	✗	✗	✗	✓	✗	✗

LeaveManagement (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET leave-adjustments	404	404	404	404	404	404	404	404	404	404
GETGET leave-transactions	404	404	404	404	404	404	404	404	404	404

HolidaySettings (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET holidays	404	404	404	404	404	404	404	404	404	404

PayrollDashboard (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET dashboard	404	404	404	404	404	404	404	404	404	404

EmployeeImport (1 endpoints) — 6 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET batch-history	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✓	✓	⚠ GAP

Report API (8 domains) ✓ 53 ✗ 0 ⚠ 127 gaps ▼

SalesReport (4 endpoints) — 36 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST sales report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST salesByProduct report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST salesByCustomer report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST salesByPerson report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

ExpenseReport (3 endpoints) — 27 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST expense report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST inputTax report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST paymentSlip report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

AccountingReport (3 endpoints) — 25 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST profit-and-loss report	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST trial-balance report	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST balance-sheet report	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

PurchaseReport (2 endpoints) — 14 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST purchase report	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST purchaseTax report	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

InventoryReport (2 endpoints) — 6 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST stocks report	✓	✓	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST product report	✓	✓	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP

WHTReport (1 endpoints) — 7 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST wht report	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

ReportDashboard (1 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET outstanding-payments	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓

PayrollReport (2 endpoints) — 12 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
POSTPOST payroll report	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✓	✓	⚠ GAP
POSTPOST payroll summary report	✓	⚠ GAP	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	✓	✓	⚠ GAP

Profile API (3 domains) ✓ 53 ✗ 17 ▼

MyCompany (4 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET company	✓	✗	✓	✗	✗	✗	✗	✗	✗	✗
GETGET consent	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET logo	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET user list	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗

MyCompanyMember (2 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET me	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET dashboard	405	405	405	405	405	405	405	405	405	405

DocumentTemplate (3 endpoints)

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET templates	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET default	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓
GETGET title setting	405	405	405	405	405	405	405	405	405	405

Documents (9 domains) ✓ 259 ✗ 0 ⚠ 281 gaps ▼

Quotation (6 endpoints) — 28 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

TaxInvoice (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Receipt (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

CashInvoice (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

CreditNote (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

DebitNote (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

PurchaseOrder (6 endpoints) — 41 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

Expense (6 endpoints) — 38 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

BillingNote (6 endpoints) — 29 PERM GAP

Endpoint	owner	accountant	acctFirm	salesManager	seniorSales	salesAdmin	salesPurchase	hrManager	hrAdmin	cashier
GETGET list	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET /{id}	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST create	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ VAL	⚠ GAP	⚠ VAL	⚠ GAP	⚠ GAP	⚠ GAP
POSTPOST search	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET total	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP
GETGET serial	✓	✓	✓	✓	✓	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP	⚠ GAP

RBAC Permission Matrix

Role Summary