# Permission Matrix

Permissions use `{module}.{action}` and are combined with branch/data-scope rules.

| Role | Draft | Approve | Post | Reverse | View cost/profit | Settings |
|---|---:|---:|---:|---:|---:|---:|
| Super Administrator | Yes | Yes | Yes | Yes | Yes | Yes |
| Company Owner | View/limited create | Policy | No by default | No by default | Yes | Limited |
| Finance Manager | Yes | Yes | Yes | Yes | Yes | Accounting |
| Accountant | Yes | Conditional | Yes | Conditional | Yes | Tax/period limited |
| AR User | Customer documents | No | Conditional | No | No | No |
| AP User | Vendor documents | No | Conditional | No | Cost only | No |
| Cashier | Receipts/payments | No | Conditional | No | No | No |
| Operations | Jobs/POD | No financial approval | No | No | Permission only | No |
| Auditor | Read only | No | No | No | Yes | No |

Maker-checker prevents a creator from approving the same transaction when enabled.