Platform

Role-based access control across every module

Decide who sees what, per module and per action — checked on the server every time, not hidden in the interface.

  • Start free
  • Setup in minutes
  • No trial clock

Per resource, per action

Permissions are granted as view or manage on each module, so you can give a bookkeeper invoices and expenses without staff records, or a site manager the staff and asset registers without company finances. It's the difference between delegating properly and giving someone the keys to everything.

Enforced on the server, not in the interface

Hiding a menu item isn't access control. Every request is checked server-side, and beneath that PostgreSQL row-level security isolates each organisation's data at the database, deny-by-default. A bug in a handler still can't return another company's rows.

  • Checked on every request, not just in the UI
  • Row-level security on every tenant table
  • Deny-by-default rather than allow-by-default

And a record of who did what

Every create, update and delete is written to the activity log with the user who made it. Permissions decide what someone can do; the log tells you what they did.

FAQ

Roles & permissions — common questions

Everything you need to know about ERPFlow. Can't find the answer? We're here to help.

Contact us
Does it support SSO or SAML?
Not yet. Sign-in is email and password or Google. There's no SAML, no SCIM provisioning and no enforced 2FA policy. If your organisation mandates SSO, that's a genuine blocker today — worth raising with us before you evaluate further.
Can I restrict someone to specific customers or records?
No. Permissions are per module and action rather than per record, so someone with customer access sees the customer list. Per-record access control isn't available.
Is access control included on the free plan?
Yes, though Free allows a single member so there's nobody to grant permissions to. It becomes useful from Starter upward, where you have two or more people.

Get started

Start free. Scale as you grow.

Run your whole business in one place — and pay for it like a founder, not an enterprise.

  • Start free
  • Setup in minutes
  • No trial clock