RolesReference
Roles Reference
Complete reference for roles and permissions in Rahal
Roles Reference
This reference section provides complete documentation for all roles, permissions, and their effects in Rahal.
Quick Navigation
All Permissions
Complete list of all permissions organized by category
Predefined Role Permissions
Exact permissions included in Member, Manager, and Admin roles
Permission Count Summary
| Category | Permission Count |
|---|---|
| Dashboard Access | 1 |
| Company Management | 3 |
| Users Management | 3 |
| Roles Management | 3 |
| Travelers | 2 |
| Passports | 2 |
| Policies | 3 |
| Budgets | 3 |
| Booking Requests | 5 |
| Delegations | 3 |
| Total | 28 |
Predefined Role Summary
| Role | Permissions | Dashboard Access |
|---|---|---|
| Member | 6 | ❌ |
| Manager | 11 | ✅ |
| Admin | 27 | ✅ |
Permission Naming Convention
Permissions follow a consistent pattern combining an action with a resource.
Actions
| Action | Meaning | Examples |
|---|---|---|
| Read | View/list data | Read Users, Read Policies |
| Write | Create/update data | Write Users, Write Budgets |
| Delete | Remove data | Delete Users, Delete Policies |
| Process | Workflow actions | Process Booking Requests |
| Update | Modify existing | Update Booking Requests |
| Access | Feature access | Access Company Dashboard |
User-Specific Permissions
Some permissions are scoped to the current user's data only:
| Permission | Scope |
|---|---|
| Read Booking Requests | All users' requests |
| Read User Booking Requests | Current user's requests only |
| Write User Booking Requests | Submit own requests |
Role Type Comparison
| Aspect | Predefined Roles | Custom Roles |
|---|---|---|
| Created by | System | Admin |
| Code | Fixed (MEMBER, etc.) | Generated from name |
| Permissions | Fixed | Customizable |
| Can edit name | ✅ | ✅ |
| Can edit permissions | ❌ | ✅ |
| Can delete | ❌ | ✅ (if no users) |
| Can deactivate | ❌ | ✅ |
Common Errors
| Error | Meaning |
|---|---|
| Role with code already exists | Duplicate role code in company |
| Role not found | Invalid role ID |
| Cannot delete predefined role | Attempted to delete Member/Manager/Admin |
| Cannot delete role with users | Users still assigned to role |
| Cannot change predefined permissions | Attempted to modify predefined role permissions |
| Permission denied | Missing required permission |