# Roles

> The Roller (Roles) screen — role list, columns, the Actions menu and the Role Properties, Permissions and Screens tabs of the role window.

URL: https://erpdocs.corexlogic.com/en/yonetim/ekranlar/roller

- **Type:** Screen
- **Module:** Administration
- **Menu path:** Yönetim › Kullanıcı ve Roller › Roller (Administration › Users and Roles › Roles)
- **Screen route:** `/roles`
- **Required permission:** `roles.view`

The list of roles and the role window. The screen's hint: "Yetki grupları — bir rolü açmak izinlerini bu
sayfanın üstünde düzenler" (Permission groups — opening a role edits its permissions on top of this page). Concepts:
[Permission model](https://erpdocs.corexlogic.com/en/yonetim/yetki-modeli).

![Roles list](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/roller.png)
1. New Role
2. Built-in — Administrator, cannot be deleted
3. Area and level (Staff · Manager · Administration)
4. Modules the role can write in
5. Active users holding the role
6. Click the role name to open it

## List

Roles are sorted by area (Yönetim (Administration), Ana Veriler (Master Data), Satın Alma (Purchasing), Satış (Sales),
Stok ve Depo (Inventory and Warehouse), Kalite (Quality), Üretim (Production), Lojistik (Logistics), Finans (Finance),
Servis (Service)…); roles created by the organization itself are at the end of the list, and the area column shows
"Kurumun rolleri" (Organization's roles).

| Column | Content |
|---|---|
| **Rol** (Role) | The role's name (clicking it opens the role window; requires `roles.edit`), the **Yerleşik** (Built-in) badge (Administrator only), template deviation badges and the description. |
| **Alan · Düzey** (Area · Level) | The role's area and level: **Eleman** (Staff), **Müdür** (Manager), **Yönetim** (Executive). For a role without a template, "Kurumun rolleri" (Organization's roles). |
| **Kapsam (yazma)** (Scope (write)) | The modules for which the role has write permission. For a role that holds only view permissions, **Salt okunur** (Read-only). |
| **Kullanıcı** (Users) | The number of active users who hold the role directly. |
| **İzin** (Permissions) | The number of permissions in the role. |
| **İşlem** (Action) | The **İşlemler** (Actions) menu. |

| Badge | Meaning |
|---|---|
| **Yerleşik** (Built-in) | The Administrator role; cannot be deleted and holds all permissions. |
| **Şablona +N izin** (+N permissions over template) | Permissions granted outside the template — "kurumun kararı, güncellemede korunur." (the organization's decision; preserved on upgrade.) |
| **Şablondan N izin eksik** (N permissions missing from template) | Template permissions that are not in the role — "bir sonraki sürüm güncellemesinde geri yüklenir." (restored with the next release upgrade.) |

The **Ara** (Search) box searches in the role name ("Rol adı ara…" — Search role name…).

## Actions menu

![Role row Actions menu](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/rol-islemler.png)
1. Edit — permissions and screens
2. Copy — new role with these permissions
3. Delete — disabled for the built-in role

| Item | Permission | Note |
|---|---|---|
| **Düzenle** (Edit) | `roles.edit` | Opens the role window. |
| **Kopyala** (Copy) | `roles.create` | "Bu rolün izinleriyle yeni rol" (New role with this role's permissions) — the copy is not bound to the template. |
| **Sil** (Delete) | `roles.delete` | Disabled for the Administrator role ("Yerleşik rol silinemez" — A built-in role cannot be deleted). The confirmation window shows the number of users who hold the role; "Geri alınamaz." (Cannot be undone.) |

## Role window

For a new role, the window opens on the **Rol Özellikleri** (Role Properties) tab; for an existing role, on the
**Yetkiler** (Permissions) tab. The bottom buttons are **Vazgeç** (Cancel) and **Rolü Oluştur** (Create Role) /
**Kaydet** (Save). Description: "Rolün yetkilerini ağaçtan işaretleyin; kayıt rolü taşıyan herkese hemen yansır."
(Check the role's permissions in the tree; saving applies immediately to everyone who holds the role.)

### Role Properties

![New Role — properties and template](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/rol-yeni.png)
1. Role name — cannot be changed later
2. Role template — starting permissions
3. Scope — modules the role writes in
4. Permissions and Screens tabs
5. Create Role

| Field | Rule |
|---|---|
| **Rol adı** (Role name) | Required for a new role ("Rol adı zorunlu." — Role name is required.); a second role with the same name cannot be created. Cannot be changed after saving. |
| **Kapsam (yazma)** (Scope (write)) | Write modules calculated from the selected permissions; "İzin seçilmedi" (No permission selected) or "Salt okunur" (Read-only). |
| **Rol şablonu** (Role template) | Only for a new role: **Şablonsuz — yetkileri elle seç** (No template — select permissions manually) or predefined templates grouped by area. Selecting a template fills the permissions and the screen catalog from the template ("Şablon bir başlangıç noktasıdır; yetkileri Yetkiler sekmesinde değiştirebilirsiniz." — The template is a starting point; you can change the permissions on the Permissions tab.). For an existing role, the template's name or "Kurumun rolü — şablona bağlı değil" (Organization's role — not bound to a template) is shown. |
| **Alan · Düzey** (Area · Level), **Açıklama** (Description), **Şablonun izni** (Template permissions) | Information about the selected template. |

For a role bound to a template (predefined role), a lock note appears:

![Template role — locked permissions](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/rol-sablon-kilidi.png)
1. Template the role is bound to
2. Template permissions locked; add more or Copy to narrow

"Bu rol hazır bir rol şablonundan geliyor. Şablonun N izni kilitli: her sürüm güncellemesinde geri
yüklendiği için buradan kaldırılamaz. Role ek izin verebilirsiniz; daha dar bir yetki için listede rolü
Kopyalayın." (This role comes from a predefined role template. The template's N permissions are locked: because they
are restored with every release upgrade, they cannot be removed here. You can grant additional permissions to the role;
for narrower authorization, Copy the role in the list.) If additional permissions have been granted on top of the
template, **Şablona Döndür** (Revert to Template) removes them. For the Administrator role: "Bu rol bütün izinleri taşır
ve değiştirilemez." (This role holds all permissions and cannot be changed.)

### Permissions

![Role — permission tree](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/rol-yetkiler.png)
1. Granted / total permissions
2. Search — module, page or action
3. Module — ticks all at once
4. Action — a single permission
5. Permission not granted in this role
6. Read Only — keeps only View permissions

The permission tree is organized as **Modül › Sayfa › İşlem** (Module › Page › Action); each node has a three-state
checkbox and a "selected/total" count. The tab name shows the "granted/total" count.

| Tool | Purpose |
|---|---|
| **Ara… (modül, sayfa ya da işlem)** (Search… (module, page or action)) | Matching branches open expanded. |
| **Tümünü Aç** (Expand All) · **Tümünü Kapat** (Collapse All) | Expands or collapses the branches (disabled while searching). |
| **Tümünü Seç** (Select All) · **Temizle** (Clear) | Selects or removes all (unlocked) permissions. |
| **Salt Okunur** (Read-Only) | Reduces the selection to **Görüntüle** (View) permissions only. |
| ⓘ icon | The actual scope of the permission and the second permission required in the user interface. |
| Lock icon | Comes from the template; cannot be removed. |
| "(özellik kapalı)" (feature off) | The permission's feature is turned off in Module Management; the permission can be granted but has no effect. |

Keyboard: ↑ ↓ node, → expand, ← collapse, Space checkbox, Enter expand/collapse.

> **Turkish characters in search**
In this release, the search in the tree returns no results for a term containing **ş, ı, ğ, ü, ö, ç** (e.g.
"sipariş" returns "Eşleşen izin yok." — No matching permission.). Type a fragment that does not contain these
characters: `siparis`, `teklif`, `fiyat`, `stok`.

### Screens

![Role — Screens (menu catalog)](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/rol-ekranlar.png)
1. All screens — every permitted screen in the menu
2. Adds screens the role writes to
3. Area › section › screen — shown in the menu
4. Selected / total screens

The screens the role shows in the menu — an **area › section › screen** tree, like the menu itself. The catalog does
not grant permissions; the menu is drawn from the intersection of the catalog and the permissions.

| Tool | Purpose |
|---|---|
| **Bütün ekranlar — katalog yok** (All screens — no catalog) | "Yönetici ve Denetçi gibi; izni olduğu her ekran menüde" (Like Administrator and Auditor; every screen it has permission for is in the menu). While checked, the tree is disabled. |
| **Tümünü Seç** (Select All) · **Temizle** (Clear) | Selects or removes all screens. |
| **Yazdığı Ekranları İşaretle (N)** (Mark the Screens It Writes To (N)) | Adds the screens of the resources the role has write permission for that are not in the menu. In the tree, these screens carry a "yazar" (writes) note. |
| **Şablonun Kataloğuna Dön** (Revert to Template Catalog) | Returns to the template's screen list; your selections are deleted. |

The line at the bottom states the status: if the catalog is empty, "Katalog boş — menü rolün yazdığı kaynakların
ekranlarıyla (N) çizilir." (Catalog empty — the menu is drawn with the screens of the resources the role writes to
(N).); if something is missing, "Rolün yazdığı N ekran menüde değil — "Yazdığı Ekranları İşaretle" ekler." (N screens
the role writes to are not in the menu — "Mark the Screens It Writes To" adds them.)

## Server rejection messages

| Situation | Message |
|---|---|
| Deleting the Administrator role | "Yerleşik Yönetici rolü silinemez." (The built-in Administrator role cannot be deleted.) |
| Removing a template permission | "'…' bir rol şablonu: şablonun N izni kaldırılamaz — bu izinler her sürüm güncellemesinde geri yüklenir. Daha dar bir yetki için rolü kopyalayıp yeni bir rol oluşturun." ('…' is a role template: the template's N permissions cannot be removed — these permissions are restored with every release upgrade. For narrower authorization, copy the role and create a new role.) |
| Deleting a role used in an approval template | "'…' rolü '…' onay şablonunda kullanılıyor. Önce Onay Şablonları'nda aşamayı başka bir role verin." (The role '…' is used in the approval template '…'. First assign the stage to another role in Approval Templates.) (if there are pending approvals, "… ve bekleyen onayları sonuçlandırın." — … and complete the pending approvals.) |
| A role with the same name | "'…' adında bir rol zaten var." (A role named '…' already exists.) |
| Granting the `users.import` permission | "users.import iznini yalnız bu izni taşıyan bir yönetici verebilir." (The users.import permission can be granted only by an administrator who holds this permission.) |