> ## Documentation Index
> Fetch the complete documentation index at: https://sims-bae272dd.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions reference

> Every permission a custom role can grant, and what it allows.

Permissions are written as `area:action` and are ticked when you
[create a custom role](https://sims-bae272dd.mintlify.site/admin/roles.md).

> [!NOTE]
>
> Owners and Admins bypass all of these inside their business. Permissions apply
> to Members, per store.

## Catalog

| Permission | Allows |
| - | - |
| `products:read` | See products |
| `products:write` | Create and edit products, including selling prices |
| `products:delete` | Delete products |
| `products:export` | Export the catalog |
| `categories:read` / `write` / `delete` | View, manage and remove categories |
| `suppliers:read` / `write` / `delete` | View, manage and remove suppliers |

## Stock

| Permission | Allows |
| - | - |
| `inventory:read` | See stock levels and the ledger |
| `inventory:write` | Adjust stock |
| `inventory:transfer` | Move stock between stores |

## Purchasing

| Permission | Allows |
| - | - |
| `purchases:read` | See purchase invoices |
| `purchases:write` | Create and edit invoices, including scanning them |
| `purchases:receive` | Check in deliveries — the one staff need for phone receiving |
| `purchases:approve_prices` | Approve or reject price recommendations |
| `purchases:delete` | Delete invoices |

## Sales and reporting

| Permission | Allows |
| - | - |
| `sales:read` | See sales records |
| `sales:import` | Import sales |
| `sales:export` | Export sales |
| `analytics:read` | See the analytics screens |
| `reports:read` / `reports:export` | View and export reports |

## Administration

| Permission | Allows |
| - | - |
| `stores:read` / `write` / `delete` | Manage store locations |
| `stores:manage_members` | Assign people to a store |
| `businesses:read` / `write` / `delete` | Manage the business |
| `businesses:manage_members` | Manage who belongs to the business |
| `roles:read` / `write` / `delete` | Manage roles and their permissions |
| `settings:read` / `settings:write` | View and change business settings, including agent API keys |
| `notifications:read` / `notifications:manage` | See and act on notifications |
| `audit:read` | Read the audit trail |

## Combinations worth knowing

> [card] Back-room receiver
>
> `products:read`, `purchases:read`, `purchases:receive`, `inventory:read` —
> can count deliveries in, on a phone, and nothing else.

> [card] Shelf-price updater
>
> Add `products:write`. Note this changes prices at every store.

> [!WARNING]
>
> `settings:write` includes agent API keys, and `roles:write` lets someone
> change what everyone else can do. Both are effectively administrative — grant
> them accordingly.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.