Role Permission for Page and Report in ERPNext
Role Permission for Page and Report allows administrators to control which users can access specific pages and reports in ERPNext. While Role Based Permissions manage access to DocTypes such as Sales Orders, Customers, and Purchase Orders, this tool specifically controls access to standalone Pages and Reports.
For example, users may have access to Sales Orders but should not be able to access certain configuration pages or custom reports. In such cases, Page and Report permissions can be configured separately.
Navigation: Home > Users and Permissions > Role Permission for Page and Report
Understanding Pages and Reports
Before configuring permissions, it is important to understand the difference between DocTypes, Pages, and Reports.
- DocTypes contain multiple records, such as Sales Orders, Customers, Suppliers, and Employees.
- Pages are standalone interfaces such as Selling Settings or custom application pages.
- Reports are analytical views and data presentations created using Report Builder, Query Reports, or custom reporting tools.
Access to Pages and Reports can be controlled independently of DocType permissions.
1. How to Use Role Permission for Page and Report
If Developer Mode is disabled, administrators can use this tool to assign roles directly to Pages and Reports without modifying any underlying code.
Follow these steps:
- Open Role Permission for Page and Report.
- Select the Page or Report you want to manage.
- Choose the roles that should have access.
- Save the changes.
Once saved, only users assigned the selected roles will be able to access that Page or Report.
2. Managing Custom Permissions
The tool allows administrators to override default permissions and create custom access rules for business-specific requirements.
Common scenarios include:
- Restricting access to sensitive reports.
- Allowing only managers to access configuration pages.
- Providing department-specific report access.
- Limiting access to custom application pages.
TIP
Use role-based access for reports instead of sharing report URLs directly. This ensures permissions remain secure and centrally managed.
3. Reset Permissions to Default
If custom permissions are no longer required, ERPNext provides a simple way to restore the default configuration.
To reset permissions:
- Open Role Permission for Page and Report.
- Select the required Page or Report.
- Click Reset to Defaults.
- Save the changes.
This removes all custom role assignments and restores the standard permissions defined by ERPNext.
Resetting permissions does not delete the Page or Report. It only restores the default access settings.
4. Setting Permissions as a Developer
When Developer Mode is enabled, roles can be assigned directly within the Page or Report document itself.
These permissions are then stored in the corresponding JSON configuration and become part of the application.
Role Permissions for Pages
Navigate to:
Home > Developer > Page
Then:
- Open the required Page.
- Add the roles that should have access.
- Save the document.
Role Permissions for Reports
Navigate to:
Home > Developer > Report
Then:
- Open the required Report.
- Add one or more roles.
- Save the document.
Changes made in Developer Mode are reflected in the application’s configuration files and can be included in deployments.
Best Practices
- Grant access only to users who genuinely require a page or report.
- Use role-based permissions instead of individual user-level access whenever possible.
- Review custom permissions periodically to maintain security.
- Keep sensitive financial and HR reports restricted to authorized roles.
- Use Developer Mode permissions only when creating custom applications or custom reports.
Related Topics
- Role Based Permissions
- User Permissions
- Role Profiles
- Report Builder
- Query Reports
- Page Customization
SUMMARY
Role Permission for Page and Report allows administrators to control access to ERPNext Pages and Reports separately from DocType permissions. It supports custom role assignments, default permission restoration, and developer-level configuration, helping organizations maintain secure and organized access control across the system.
