View purchase orders

Board, list, and order detail.

Change order status

Run workflow transitions the app allows.

Split orders

Create and resolve split proposals.

Edit order details

Update PO references, commercial terms, ship-to, and notes (not line totals).

View products

Product catalog and detail.

Edit products

Create, update, and deactivate products.

View suppliers

Supplier directory and offices.

Edit suppliers

Create and update supplier records.

View settings

Open settings areas (read-only where enforced).

Edit settings

Change company data, users, roles, and permissions.

Reports

Open Reports and export CSV summaries. Individual reports may also require other permissions (for example org.orders → view or org.suppliers → view).

View warehouse operations

Open WMS dashboard, tasks, bins, and stock balances.

Manage warehouse operations

Create and complete warehouse tasks, bins, and stock movements.

View WMS layout & strategy

Read zones, bins, replenishment rules, allocation strategy, and BF-50 topology graph export (GET /api/wms?topologyGraph=1) (BF-06 scope).

Edit WMS layout & strategy

Change zones, bins, replenishment rules, warehouse allocation strategy, and BF-50 POST export_warehouse_topology_graph (same payload as GET topology export).

View WMS execution

Read dock, tasks, waves, inbound/outbound execution surfaces (BF-06 scope).

Run WMS execution

Create and complete operational workflows: tasks, waves, dock, outbound ship, receiving, BF-61 demand forecast stub upsert.

View WMS inventory controls

Read stock holds, cycle counts, and lot-batch registry actions (BF-06 scope).

Manage WMS inventory controls

Balance holds, cycle counts, serialization registry, saved ledger views — not lot-master alone (BF-16: see org.wms.inventory.lot) nor serial-only registry (BF-48: see org.wms.inventory.serial).

View lot/batch master registry

Read WMS lot/batch metadata profiles (BF-16 scope).

Edit lot/batch master registry

Create/update `WmsLotBatch` via `set_wms_lot_batch` without broader inventory qty controls (BF-16).

View serialization registry scope

Read Stock serialization surfaces scoped like inventory view (BF-48 — paired with serial edit for mutation shells).

Manage serialization registry

Register serials / attach to movements / set balance pointers (`register_inventory_serial`, …) without broader inventory qty controls (BF-48).

View quality hold release scope

BF-58 — paired with edit to release balances frozen with org.wms.inventory.hold.release_quality.

Release quality-scoped inventory holds

BF-58 — `release_inventory_freeze` / `clear_balance_hold` on rows whose `holdReleaseGrant` is this resource (without full inventory edit).

View compliance hold release scope

BF-58 — paired with edit to release balances frozen with org.wms.inventory.hold.release_compliance.

Release compliance-scoped inventory holds

BF-58 — `release_inventory_freeze` on rows whose `holdReleaseGrant` is this resource (recall / regulatory paths).

View CRM

Leads, accounts, contacts, opportunities, and activities (own records unless CRM edit is granted).

Manage CRM

Create and update CRM records for any user in the tenant (managers).

View Control Tower

Dashboard, workbench, shipment 360, search, and customer-safe reporting.

Manage Control Tower

Post milestones, notes, documents, financial snapshots, alerts, exceptions, and saved views.

View tariffs

Ocean tariff contracts, versions, and rate lines.

Manage tariffs

Create and edit tariff contracts, versions, and pricing lines.

View RFQs

Ocean RFQs, quote responses, and comparison.

Manage RFQs

Create RFQs, invite recipients, enter quotes, and run comparison.

View invoice audit

List freight invoice intakes, parsed lines, and snapshot match outcomes.

Manage invoice audit

Create intakes, run audits vs pricing snapshots, and record approvals or overrides.

View integration hub

Open /apihub and read API Hub data (connectors, mapping, ingestion runs, staging).

Manage integration hub

Create or change connectors, templates, ingestion runs, mapping analysis jobs, staging batches, and staging downstream apply (SO/PO/CT still require their module grants).

View risk intelligence

Supply Chain Risk Intelligence dashboard, event feed, and event detail (read-only).

Manage risk intelligence

Ingest external events and run triage workflows (future phases).