TABLE OF CONTENTS
Introduction
Firstshift allows configuring different roles and permissions at the application level based on the customer’s requirements. The customer admin role has full access to the application, including managing users, roles, and permissions, managing data access for the users, and all the functionalities within the application.
Typical Customer admin roles include
Full access to all system features and settings.
Can create, edit, and delete other users and roles.
Has access to all planning data and can create forecasts, plans, reports, etc.
Can configure system-wide settings and trigger workflows.
Permissions Model
Permissions are typically defined at various levels to ensure precise control:
1: Module-Level Permissions
Customer admin can control the role permissions at the module level. The module here includes
Forecast Management,
Demand Planning
Inventory Planning,
Product Life Cycle Management
Data management
Dashboards
Analytics
Administration
Supply chain canvas
Workflow Settings, etc.
2: Feature-Level Permissions
Based on the specific role, the Customer admin can control different features within a module. For example, the demand planning module can have different features, like
Create and manage a specific planning view (say only sales plan)
Create and manage Segmentation
Access to the specific dashboard and related features.
Access to specific time series (View, Update)
Access to trigger only specific workflows.
3: Measures-Level Permissions
Control what measures data access for each role.
4: Action-Level Permissions
Controls what actions a user can perform on the data, such as viewing, editing, deleting, or creating records. The following are a few sample actions
View and update time series data
Create, edit, and delete plans
Create, Run, and Compare Forecast
View and Run workflow settings
Upload and delete data.
Create, Edit, and Share agents.
Screenshot 1: The list of roles configured.

Note: Firstshift prepopulates standard roles during tenant setup. However, based on the Tenant’s requirements, the prepopulated roles can be deleted and replaced with Tenant-specific roles.
Screenshot 2: Configure the permissions for each role
This is the screen where the customer admin can provide feature, module, and action permissions to the role.


Screenshot 3: The expanded view for the Measure permissions, where the role can have a view or Edit permissions for each time series.

Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article