Security & RBAC
Enterprise-grade security with granular roles, permissions, multi-tenant isolation, audit trails, and API token management.
What you can work with
Granular Permissions
Control which tasks each person can perform, such as viewing orders or managing company settings.
Role-Based Access
Start with a role, then review the permissions it gives that user before granting access.
Multi-Tenant Isolation
Company membership defines the workspace a user can access. Assign the appropriate locations as well as their role.
Custom Permission Overrides
Override role defaults with custom permissions per user. Fine-tune access without creating new roles for every edge case.
Audit Integration
Use recorded audit events to investigate changes. The details available depend on the action.
Try it with a sample
Define Roles and Permissions
Review the available roles and permissions in user management. Match access to the tasks that person needs.
Assign Users to Roles
Assign each user a role in admin. Custom permissions can override defaults for users who need specialized access.
Test the Assigned Access
Sign in as the intended user and check an allowed task and a restricted task. Review location access before rollout.
Review Audit Logs for Compliance
Review the recorded events for a test change and confirm the information your internal review needs.
Available On
Security & RBAC is configured and managed in Admin. Permissions are enforced across all surfaces — Admin, POS, Mobile, and B2B Portal.
Related Features
Ready to secure your wholesale operation?
See how Vender Security & RBAC gives you enterprise-grade access control with full audit visibility.