A position is a set of roles

130 business roles across the whole company: a role is tied to a specific object and period, it grants the access and opens the course. One person carries different roles on different projects.

Why a separate role model

In most ERP setups "role" means one line in the user form. Here it is a subsystem: a position is assembled from roles, each role syncs the Odoo security groups on activation and gives them back on revocation, delegation covers holidays and sick leave, and every assignment is auditable. That is what keeps access clean as the company grows.

Core

The foundation everything else builds on:

• it_roles

Assignment lifecycle

Grant, request, delegate, review, revoke — automated end to end:

• it_roles_auto
• it_roles_request
• it_roles_leave
• it_roles_periodic_review
• it_roles_account_preset
• it_roles_account_preset_auto
• it_roles_user_provision
• it_roles_instruction

Control & audit

Integrity, Separation of Duties, registry, dashboard, API:

• it_roles_validator
• it_roles_assignment_validator
• it_roles_report
• it_roles_dashboard
• it_roles_api
• it_roles_export

Roles by department

Ready-made role sets wired to the standard Odoo groups — you do not invent them from scratch:

• it_roles_crm — Sales — 7-level hierarchy: analyst, operator, rep, account, head.
• it_roles_finance — Finance & accounting, linked to standard Odoo Accounting groups.
• it_roles_hrm — HR roles with hierarchical access to employee data.
• it_roles_mrp — Manufacturing, linked to standard Manufacturing & Inventory groups.
• it_roles_mrp_qc — Quality control: inspector, lead, head, QMS specialist.
• it_roles_purchase — Purchasing, linked to standard Odoo Purchase groups.
• it_roles_logistics — Warehouse & logistics, linked to standard Inventory groups.
• it_roles_eam — Maintenance (EAM): technician, engineer, linked to Maintenance group.
• it_roles_it — IT department: sysadmin, developer, ERP admin, head.
• it_roles_rnd — R&D, linked to standard Odoo Manufacturing groups.
• it_roles_hse — HSE: safety, environmental, with read access to employee records.
• it_roles_compliance — Compliance: metrologist, certification officer, document control.
• it_roles_tooling — Tooling fleet: mould maintenance, mould designer, tool crib.
• it_roles_corporate — Corporate top layer: CTO, Manufacturing Director, Commercial Director.
• it_roles_bu — Business Unit Head: P&L, write-off and capex approval.

PPM role layer

Project-side roles — part of the Project Management package:

• it_roles_ppm — Unified PPM role catalog: RBAC, delegation, RACI, PM assignment.
• it_roles_ppm_external — Auditable role for external / non-employee accounts, scoped and time-boxed.
• it_ppm_roles_crm — Sales roles: access hierarchy and account handover.
• it_ppm_roles_mrp — Production roles: access hierarchy and quality control.