SUB-ARTICLE under Access management in Sapera. Describes the permissions for notes and
documents attached to e.g. customers, invoices and accounts. Status: DRAFT pending approval.
This article covers the permissions that control notes and documents in Sapera. Notes and documents do not live in one single place — they are attached to individual records throughout the system, for example on a customer, an invoice or an account.
You assign these permissions in Financial under Security → Groups → select a group → Permissions (set Allow/Deny per permission).
Note: Creating and reading notes is not permission-gated. Anyone who can reach a record can add and view notes on it. The permissions below apply solely to editing or deleting notes.
Allows editing a note created by another user.
Important: A user can always edit their own notes — this does not require the permission. The permission only governs whether you may change others' notes. Without it, editing another user's note is locked (the note opens read-only, and the edit action is hidden).
Allows deleting a note created by another user.
Important: As above, a user may always delete their own notes. The permission only applies to deleting others' notes. Without it, the delete action is hidden/inactive on other users' notes.
This permission controls whether a screen is shown.
Access Documents — controls whether the Documents screen is visible. This controls visibility of the menu item/screen.
Your own notes are always free. The Edit/Delete permissions only concern other users' notes.
Administrators get both Edit and Delete on notes by default.
Allow vs. Deny: An explicit Deny wins over an inherited Allow.
Want to know more?
Read more in these related articles:
Access management in Sapera (overview)
What permissions are, where to find them, how they are scoped, and links to one sub-article per area.
Actors (permissions)
The permissions that govern work with actors — CPR (SSN) access, merging actors, role rights per organizational unit, and screen visibility.
Reports (permissions)
The permission that controls which reports a group may see and run, granted per report tag.
