Overview

Rootstock provides pre-built Permissions Sets as part of the Rootstock ERP, Rootstock Financials, Rootforms, Rootstock Financial Analytics, Rootstock Lightning, Rootstock Extension, and Rootstock Financials Extension Packages. These can be used as an alternative to creating and managing profiles and easily grant users additive access to different functional areas. Permission Sets provide greater flexibility than profiles, as multiple permission sets can be assigned to a given user.

For more details on Permission Sets, see the Salesforce Help article - Permission Sets.

  IMPORTANT 

• Rootstock provides standard Profiles as part of the package. These Profiles should not be assigned to Users if they want to utilize the Permission Sets outlined in this article, as these Profiles will override the settings applied in the Permission Sets.

• The Permissions Sets outlined in this article only apply to Rootstock Objects. Permission to access and interact with Salesforce standard objects (i.e., Accounts/Contacts/Products) must be provided in either Profiles or additional Permission Sets.

  NOTE  Due to a Salesforce limitation, system permissions cannot be packaged in the Permission Sets. Therefore, Rootstock has provided System Permissions on its standard RS and RSF Profiles.

How to assign Permission Set to users?
 

1. Navigate to Setup > Users > and select the desired User to update

2. Navigate to 'Permission Set Assignments' and click 'Edit Assignments'

3. Adjust the Enabled Permission Sets column as desired, and click Save.

It is also possible to mass assign users to a given set using the 'Manage Assignments' button on the Permission Set record overview page.

How can I modify a pre-built (packaged) Permission Sets?
 

1. Navigate to Permission Set (Setup > Manage Users > Permission Sets)

2. Click Clone on the pre-built Permission Set and edit access as desired.

How to create Custom Permission Sets?

Without relying on packaged Permission Sets, the users can create their own custom Permission Sets with the permissions they need for a specific user. Please follow the steps below to create custom Permission Sets:
 

1. Navigate to Setup > Manage Users > Permission Sets.

2. Click New to create a new custom Permission Set by specifying the Label and required License (if needed).

3. Provide the permissions based on the user requirements.

4. Then, the custom Permission Set can be assigned to desired users.

  IMPORTANT  Only packaged Permission Sets are maintained by Rootstock. Cloned and custom Permission Sets are the responsibility of the subscriber to test and maintain. Rootstock provides a list of metadata elements as part of Release Notes for ERP-related, Financial, and Lightning releases, which can be used to identify required changes on cloned and custom Permission Sets.

Below is a list of the Permission Sets pre-built for the packages:

1. Rootstock ERP

2. Rootstock Financials

3. Rootforms

4. Rootstock Financial Analytics

5. Rootstock Lightning

6. Rootstock Extension

7. Rootstock Financials Extension

  NOTE  Rootstock follows a specific nomenclature for the Permission Sets of different packages, such as:

If the Permission Sets are not visible in your Org, raise a Rootstock Support Case.
 

Rootstock ERP

General Permission Sets:

 

• RS - Standard Platform User and RS - Standard Platform User Light Access
   

  • These two Permission Sets are intended for Super Users and grant access to all objects, pages, and classes that are part of Rootstock ERP.
  • RS - Standard Platform User Light Access does not have View All/Modify All access to Rootstock objects.

• RS - Baseline Permission Set
   

  • This Permission Set includes access to helper classes and objects used for processing purposes among Rootstock processes.

  • It is intended to be used as the baseline Permission Set if the functional area-based Permission Sets (as detailed below) are assigned to enable targeted user access.

  IMPORTANT  This baseline Permission Set needs to be assigned to the user using the ERP Permission Sets listed below.
 

Functional Areas Permission Set Groups:
 

• ERP Permission Set Groups

Functional Areas Permission Sets:

ERP System Setup

• Permission Sets - ERP System Setup

Engineering

• Permission Sets - Engineering

MRP

• Permission Sets - MRP

DRP

• Permission Sets - DRP

• Permission Sets - Planned Location Transfer

Inventory

• Permission Sets - Inventory (Management and Transactions)

• Permission Sets - Standard Cost

Purchasing & Requisition

• Permission Sets - Purchasing

• Permission Sets - Requisitions

• Permission Sets - Freight & Landed Costs

Sales Order

• Permission Sets - Sales Order Setup

• Permission Sets - Sales Order Processes

• Permission Sets - Sales Order Entry Visibility

• Permission Sets - Credit Admin

Product Configurator

• Permission Sets - Product Configurator

Returned Material Authority (RMA)

• Permission Sets - Returned Material Authority (RMA)

Sales Contracts

• Permission Sets - Sales Contracts

Work Orders

• Permission Sets - Work Orders 

LPN

• Permission Sets - LPN

Project Control

• Permission Sets - Project Control

Rootstock Financials

General Permission Sets:
 

• Currently, there is no full-access Permission Set for financials. A Permission Set Group needs to be created to grant access to financial areas to include all the RSF-XXX Permission Sets. (or)

• To grant access to certain financial functional areas like AP, AR, GL, etc., create the permission set group as below and include the following permission sets:

• RSF - Baseline Permission Set

  • This Permission Set includes access to helper classes and objects used for processing purposes among Rootstock ERP & Financials processes.

  • It is intended to be used as the baseline Permission Set if the functional area-based Permission Sets (as detailed below) are assigned to enable targeted user access.

  IMPORTANT  This baseline Permission Set needs to be assigned to the user using the Financial Permission Sets listed below.
 

• RSF - ERP Financials Transactional Access

  • This permission set includes access to the objects involved in creating GL transactions for transactions such as Inventory Transfer, Sales Order Issue, Purchase Order Receipt, etc.

  IMPORTANT  This Permission Set can be used in Financial orgs. It has to be assigned to the user who performs ERP-related operations in the Financial org.

Functional Areas Permission Sets groupings:
 

Financial System Setup

• Permission Sets - Financial System Setup/Admin 

• Permission Sets - Bank Account

Multiple Currency

• Permission Sets - Multiple Currency

Accounts Payable & Receivable

• Permission Sets - Accounts Payable

• Permission Sets - Accounts Receivable

General Ledger

• Permission Sets - General Ledger 

• Permission Sets - Bank Process

Period Close Activities

• Permission Sets - Period Close Activities

Financial Reporting

• Permission Sets - Financial Reporting

Fixed Assets

• Permission Sets - Fixed Assets

RootForms

Permission Sets
 

• Permission Sets - RootForms

Rootstock Financial Analytics

Permission Sets
 

• Permission Sets - RFA

Rootstock Lightning

When using Non-Admin User for Rootstock Lightning, below are the mandatory Permission Sets that need to be used:

  IMPORTANT  To access specific modules in ERP/Financials, the users should also be assigned those respective ERP/Financial Permission Sets along with the Lightning Permission Sets listed below.

Lightning Experience Permission Sets
 

• RS - Baseline Permission Set

• RS System Permissions 
  • Grants access to reports stored in Public Folders. This is needed to view the reports and/or charts in the Lightning 360 pages.

• Rootstock - Non-Admin User

  • Grants access to necessary Apex classes and Rootstock Lightning fields needed to use the Rootstock Lightning experience.

  • Provides visibility to Lightning tabs.

  IMPORTANT  The Rootstock delivered Profiles users should use the Rootstock - Non-Admin User Permission Set. The users using the Rootstock delivered Permission Sets should use the RS - Baseline Lightning Permission Set instead of Rootstock - Non-Admin User.
 

• RS - Baseline Lightning

  • Grants access to necessary Apex classes to use the Rootstock lightning experience.
     

• Rootstock Lightning Toolkit User

  • Grants access to the Lightning Components.

  • When assigned this Permission Set, users will have:

    • Ability to view and customize the list of records as a data table on a flow screen.

    • Ability to view and customize the fields from related objects in lightning record pages.

    • Ability to use any lightning component in lightning record pages.
       

• Rootstock Custom UI Rules and Actions

  • Grants access to the Custom UI Rules and Actions objects.

  • When assigned this Permission Set, users will have:

    • Ability to view the Custom UI Rule and Custom UI Action objects when using the Permission Set 'Rootstock Custom UI Rules and Actions - ReadOnly V2'.

    • Ability to create, edit, and delete the Custom UI Rule and Custom UI Action objects when using the Permission Set 'Rootstock Custom UI Rules and Actions - Edit V2'.
       

• RSF - ERP Financials Transactional Access

  • Grants access to the objects involved in creating GL transactions for transactions such as Inventory Transfer, Sales Order Issue, Purchase Order Receipt, etc.

  NOTE  The Permission Set 'RSF - ERP Financials Transactional Access' can be used in Financial orgs. It has to be assigned to the user who performs ERP-related operations in the Financial org.
 

Rootstock Extension

Below are the packaged Permission Sets available in the Rootstock Extension package.
 

• Rootstock Extension Non Admin User

  • This Permission Set must be assigned to the Non-Admin user who needs to access the PO-AP Match Workbench - Lightning.

  • This has access to the necessary Apex Classes needed to access the PO-AP Match Workbench.
     

  IMPORTANT  The users should also be assigned the respective Rootstock ERP Permission Sets.

Rootstock Financials Extension

The below are the packaged Permission Sets available in the Rootstock Financials Extension package.
 

  IMPORTANT  Any user who needs access to the pages available in the Financials Extension package should be assigned with respective Rootstock Financial Permission Sets and the related Rootstock Financials Extension Permission Sets. For example, if user requires access to AP related pages from the Financial Extension package, the user should be assigned with 'Rootstock Financials Extension Accounts Payable' Permission Set along with related Accounts Payable financial Permission Sets.
 

• Rootstock Financials Extension Baseline

  • This Permission Set should be mandatorily assigned to every Non-Admin user.

  • This has access to the necessary Apex classes that are part of the Rootstock Financials Extension.

  IMPORTANT  This baseline Permission Set needs to be assigned to the user using the Financial Extension Permission Sets listed below.
 

• Rootstock Financials Extension Standard Full Access User

  • This Permission Set has to be assigned to the Non-Admin user who needs to access every module in the Rootstock Financials Extension.

  • This has access to all the Rootstock Financials Extension objects/pages and the fields created in the Rootstock Financial objects to support Rootstock Financials Extension processes.

• Rootstock Financials Extension Accounts Payable

  • This Permission Set has to be assigned to the Non-Admin user who needs to access the modules in Accounts Payable.

  • This has access to the necessary objects/pages in Accounts Payable.

  • When assigned this Permission Set, users will have:

    • Ability to access the Update Payable Transactions page.

    • Ability to access the Open Item Application (AP) page.

    • Ability to create, edit, and delete Recurring Payable Templates.

    • Ability to access the Create Payables From Templates page.

• Rootstock Financials Extension Accounts Receivable

  • This Permission Set has to be assigned to the Non-Admin user who needs to access the modules in Accounts Receivable.

  • This has access to the necessary objects/pages in Accounts Receivable.

  • When assigned this Permission Set, users will have:

    • Ability to create, edit, and delete Deposit Entries.

SEE ALSO
 

Rootstock Profile and Access Control