# Roles & permissions # Roles & permissions Access is controlled per staff member. The catalogue and orders remain visible for read-only users; write actions are hidden when you do not have write access.

Level	Typical access
Reader	View Items, Orders, Vendors, Receive lists. Cannot change quantities, create orders, receive, or save stock take.
Write	Update items, run the ordering session, create orders, receive stock, save stock take.
Administrator	Everything above, plus Settings (users, MFA/SMTP, hospital coding, lookups, audit). Administrators always have write access.

Module grants are configured under **Settings → Security**.