DC

Permissions

LiveFuture capability
Today: Business Central permission sets
Five roles, deliberately few, not yet a live modeevery screen is open to everyone signed in todaygranular permissions follow once the functionality is agreed
Who would see whatThe plan, once roles are switched on5 roles
AreaMSC InternalCustomerDriverWarehouseAccounts
Store front & orderingCan seeCan seeCannot seeCannot seeCannot see
Buying lists & budgetsCan seeCan seeCannot seeCannot seeCannot see
Approvals, sites & teamsCan seeCan seeCannot seeCannot seeCannot see
The book of companiesCan seeCannot seeCannot seeCannot seeCan see
Picking & dispatchFrom NovCannot seeCannot seeFrom NovCannot see
Today's round (driver app)Can seeCannot seeCan seeCannot seeCannot see
Invoicing & credit (Xero)Can seeCannot seeCannot seeCannot seeCan see
ReportsCan seeCannot seeCannot seeCannot seeCan see
Feedback boardCan seeCannot seeCannot seeCannot seeCannot see
Store front & ordering
MSC InternalCan seeCustomerCan seeDriverCannot seeWarehouseCannot seeAccountsCannot see
Buying lists & budgets
MSC InternalCan seeCustomerCan seeDriverCannot seeWarehouseCannot seeAccountsCannot see
Approvals, sites & teams
MSC InternalCan seeCustomerCan seeDriverCannot seeWarehouseCannot seeAccountsCannot see
The book of companies
MSC InternalCan seeCustomerCannot seeDriverCannot seeWarehouseCannot seeAccountsCan see
Picking & dispatch
MSC InternalFrom NovCustomerCannot seeDriverCannot seeWarehouseFrom NovAccountsCannot see
Today's round (driver app)
MSC InternalCan seeCustomerCannot seeDriverCan seeWarehouseCannot seeAccountsCannot see
Invoicing & credit (Xero)
MSC InternalCan seeCustomerCannot seeDriverCannot seeWarehouseCannot seeAccountsCan see
Reports
MSC InternalCan seeCustomerCannot seeDriverCannot seeWarehouseCannot seeAccountsCan see
Feedback board
MSC InternalCan seeCustomerCannot seeDriverCannot seeWarehouseCannot seeAccountsCannot see
9 areas across 5 roles. 1 of them carry a month rather than a yes or a no, because the area itself lands later. Nothing on this screen is switched on today: every screen is open to everyone signed in.
The five roles in wordsWhat each person would be here to do, and what stays out of their way5 roles
MSC InternalThe whole book of companies and every screen in the platform.Would see: Every company: orders, buying lists, approvals, budgets, sites, teams. Invoicing and credit control, feeding Xero. Reports, settings, the feedback board and this page.Nothing would be hidden from MSC Internal.
CustomerTheir own company only: the shop side of the platform.Would see: Their company's orders, buying list, approvals and budgets. Their sites and their team. Their store front and its editor.Never another company, never MSC's costs, never invoicing or credit.
DriverToday's round, on the phone in their pocket. Nothing else.Would see: Today's round: drops, parcels, proof of delivery.No company screens, no prices, no admin. The round would be the whole world.
WarehousePicking, dispatch and goods in, arriving in November.Would see: Picking, dispatch and goods in, when fulfilment lands in November.No commercial screens. Until November the nav would show what is coming, dated.
AccountsInvoicing and credit control, connected to Xero.Would see: The book of companies, entered through the money screens. Invoicing and credit control, with the invoicing AI. Reports.No ordering, approvals or delivery screens; Accounts would work the money.
Five roles is deliberate. A long list of permissions is how a system ends up with nobody able to say who can do what, so the roles stay few and the words stay plain.