Workspace Access Control
Workspace visibility can be controlled using Modules and Roles. This allows administrators to determine which workspaces are available to specific users based on their permissions.
For a user to access a workspace, they must first have access to the corresponding module. Additional role restrictions can then be applied for more granular control.
1. Module-Based Access
Standard workspaces are displayed only if the user has access to the corresponding module.
For example, if a user’s access to the Website module is removed, the Website workspace will no longer appear in their workspace list.
Module access determines whether a user can view the standard workspaces associated with that module.
2. Role-Based Access
In some situations, users may have access to a module but should still be restricted from viewing its workspace. This can be achieved by configuring role-based access for the workspace.
For example, a workspace administrator may configure the Website workspace so that only users with the Website Manager role can access it.
With this configuration:
- Users who have access to the Website module but do not have the Website Manager role cannot view the workspace.
- Users who have both the required module access and the Website Manager role can access the workspace.
Role-based restrictions provide an additional layer of security, allowing administrators to control workspace visibility without removing module access.
3. Default Workspace
You can configure a default workspace that opens automatically when a user signs in.
By default, ERPNext opens the workspace that the user last visited. To choose a different default workspace:
- Open the user avatar menu.
- Select My Settings.
- Open the User Settings form.
- Select the desired workspace in the Default Workspace field.
- Save the changes.
The selected default workspace will be displayed each time the user logs in unless another workspace is configured later.
