Administrator, Employee and Customer Access

Administrator

Administrators control the installation. Administrator access includes users, permissions, settings, modules, licensing and all records exposed by enabled modules.

Employee

Employees use the same Desk shell but only receive the navigation, module actions and record access permitted for their account.

Customer

Customers never use the Employee workspace. They use Customer Portal authentication and only customer-facing functions.

Important boundary

Customer accounts must not expose:

• Employee navigation
• Employee assignment controls
• Internal notes
• Administrator settings
• Module Manager
• licensing
• other customers records

Server-side enforcement

Menu visibility is a convenience. DoorFall Desk also checks access server-side. A hidden menu item is not the security boundary.