Bus System Docs
  • English

    • Roles, Permissions & Access Governance

    The Role Management module ensures every employee has the exact permissions required for their daily job—protecting financial data, passenger records, and company settings from unauthorized access.

    Role Management Matrix

    1. Pre-Configured Operational Roles

    The platform includes standard roles tailored to standard bus company operations:

    RoleIntended Staff MemberWhat They Can DoOperational Boundaries
    Super Admin / OwnerCompany Owner, General ManagerComplete access across all branches, reports, financial settings, and staff accounts.Can configure system-wide exchange rates, API connections, and custom roles.
    Branch ManagerStation Manager, Branch SupervisorFull operational control within their assigned station: manage counter staff, view all station bookings, approve cash refunds, and reassign buses.Cannot view or modify data belonging to other branches.
    Sale OperatorTicket Counter Clerk, Station CashierFast ticket issuance: search schedules, select seats, accept cash/KHQR, print boarding passes, and look up customer bookings.Can only view their own sales; cannot delete users, alter route prices, or edit schedules.
    Finance ManagerChief Accountant, Settlement OfficerAccess to all financial reports, daily cash drawer balancing, postpaid agency settlements, and refund ledgers.Cannot modify route schedules or dispatch daily buses.
    AgentExternal Travel Agency, Hotel Tour DeskSells tickets using their prepaid balance or postpaid credit limit.Can only see their own bookings and wallet balance; company-wide reports and other agencies are strictly invisible.

    2. Inspecting Role Permissions

    To review the exact capabilities granted to an existing role:

    1. Open Settings from the left navigation.
    2. Click Role Management.
    3. In the role list, locate the role (e.g., Branch Manager or Sale Operator).
    4. Click the View (eye) icon on its row.
    5. The permissions matrix opens, organized by operational section:
      • Bookings & Ticketing: Capabilities to create, reschedule, cancel, or print tickets.
      • Operations & Fleet: Rights to view or edit routes, buses, departure schedules, and seat layouts.
      • Financials & Reports: Rights to generate master reports, commission summaries, and export CSVs.
      • User Management: Rights to add, edit, or deactivate staff accounts.

    3. Creating a Custom Role

    When your organization needs a specialized operational role (for example, a Luggage & Cargo Attendant or Night Platform Dispatcher):

    1. Under Role Management, click Create New Role.
    2. Role Identification:
      • Role Name: Descriptive title (e.g., Platform Dispatcher).
      • Role Code: Short identifier in uppercase (e.g., DISPATCHER).
      • Description: Note detailing the role's responsibilities.
    3. Select Capabilities:
      • Check only the actions the role requires. For example, a platform dispatcher might only need:
        • View Scheduled Trips
        • View Passenger Manifests
        • Scan Boarding Passes
    4. Click Save Role. You can now assign this custom role to staff members under Admin Users.

    4. Key Security & Governance Rules

    • Default System Roles Protected: Standard roles (such as Admin, Branch Manager, and Sale Operator) are protected by system policy and cannot be deleted or renamed.
    • Physical Branch Scoping: A user's assigned physical branch always takes precedence over broad permissions. Even if a role allows "View Bookings", assigning the user to Siem Reap Branch restricts their view to Siem Reap bookings.
    • Instant Updates: Permission modifications apply immediately as soon as a staff member navigates to a new page or refreshes their browser.