Chapter 6: User Setup — 6.4 Privileges Setup
Use Setup to manage and configure this feature in your EQuipWeb system.
Privileges Setup is the master list of all permissions available in the system. Each privilege controls access to a specific action — like viewing reports, editing products, or processing refunds. You typically don't need to change these unless you're creating custom access rules.
When to use this: When you need to create or manage specific access permissions that can be assigned to user roles.

This page lists every individual privilege available in the system. Privileges are the atomic building blocks of the access control system — each one maps to a specific action on a specific module. While Role Privileges (Section 6.3) is used to assign these privileges to roles, this page is where the privilege entries themselves are defined and managed.
| Element | Type | Function |
|---|---|---|
| + Add New | Green Button | Create a custom privilege entry |
| Search Bar | Text Input | Filter by privilege name or code |
| 🔽 Filter | Funnel Icon | Toggle advanced filter options (show/hide deleted) |
Use Setup to manage and configure this feature in your EQuipWeb system.
| Column | Description |
|---|---|
| Privilege Name | Human-readable name (e.g., "View Product", "Edit Membership") — clickable → opens edit form |
| Privilege Code | System identifier used internally (e.g., MasterData.Product.View) |
| Description | Explanation of what this privilege controls |
| Module | The module category this privilege belongs to (e.g., "EQuip Setup", "Inventory", "POS") |
| Access Type | The action type: View, Edit, Delete, or Setting |
| Deleted | Hidden/deleted status |
Use Setup to manage and configure this feature in your EQuipWeb system.

| Field | Type | Required | Description |
|---|---|---|---|
| Privilege Name | Text | ✅ Yes | Human-readable label (e.g., "Export Product Data") |
| Privilege Code | Text | ✅ Yes | Unique system code following the pattern Module.Entity.Action (e.g., MasterData.Product.Export) |
| Description | Textarea | No | Detailed explanation of what this privilege grants |
| Button | Function |
|---|---|
| Save | Saves the privilege definition |
| Save & New | Saves and opens a blank form |
| Delete | Removes the privilege (revokes it from all roles) |
| Restore | Restores a safely deleted privilege |
Use Setup to manage and configure this feature in your EQuipWeb system.
Privileges are organized in a three-tier hierarchy:
Module (e.g., "EQuip Setup")
└── Entity (e.g., "Product", "Membership", "User")
└── Action (e.g., "View", "Edit", "Delete", "Setting")| Access Type | What It Controls |
|---|---|
| View | Can the user see/access the page or module |
| Edit | Can the user create or modify records |
| Delete | Can the user soft-delete or permanently remove records |
| Setting | Can the user access module-specific configuration settings |
| Pattern | Example |
|---|---|
Module.Entity.View | MasterData.Product.View |
Module.Entity.Edit | MasterData.Product.Edit |
Module.Entity.Delete | MasterData.Product.Delete |
Module.Entity.Setting | MasterData.Product.Setting |
Use Setup to manage and configure this feature in your EQuipWeb system.
The system privileges are organized across these module categories:
| Category | Covers |
|---|---|
| EQuip Setup | All Setup module pages — Product, Membership, Sales, Commission, User Setup, Delivery, Master Data, Menu Management, QR Online Ordering, Data Importer, Settings |
| Inventory | Stock In, Stock Out, Transfer, Stock Take, Purchase Orders, Goods Received |
| Staff Web | Staff-facing web features (attendance, scheduling) |
| POS & Others | POS terminal operations — sales, payments, voids, discounts, reports |
Use Setup to manage and configure this feature in your EQuipWeb system.
Scenario: A retailer wants to create a custom privilege that allows specific roles to export member data — a sensitive action that should be restricted.
Setup:


Export Member DataMembership.Member.ExportAllows exporting the full member database to Excel
Expected Result: The privilege is saved.
4. Go to Role Privileges (Section 6.3) → Select "Admin" role.

6. Leave it OFF for Cashier and Supervisor roles.
[!IMPORTANT] This page is intended for advanced administrators only. Modifying or deleting system-default privileges can break access control for existing roles. Most permission management should be done through Role Privileges (Section 6.3) instead.
[!TIP] When creating custom privileges, follow the
Module.Entity.Actionnaming convention to keep them consistent with system-generated privileges. This makes the Role Privileges matrix easier to read and manage.
Use Setup to manage and configure this feature in your EQuipWeb system.
| Role | View | Create | Edit | Delete |
|---|---|---|---|---|
| Admin | Yes | Yes | Yes | Yes |
| Supervisor | Yes | Yes | Yes | No |
| Cashier | No backend access | — | — | — |
[!NOTE] Exact permissions depend on the Privileges Setup configured for each role. Contact your administrator if you cannot access this page.
Use Setup to manage and configure this feature in your EQuipWeb system.

Click the + Add New button (green button).
Fill in the required fields in the form.

Fill in any optional fields as needed.
Click Save to create the new privileges.

✅ Expected Result: The new privileges appears in the list and is available for use across the system.

Click on the name or code link (blue text) of the record you want to edit.
The edit form opens with all current values pre-filled. Modify the fields as needed.


✅ Expected Result: The privileges is updated and changes take effect immediately.

Click on the name or code link (blue text) of the record you want to delete.
In the edit form, scroll down to the bottom.

✅ Expected Result: The privileges is soft-deleted — hidden from active lists and POS but can be restored later.
[!WARNING] Records linked to active transactions or other modules cannot be deleted. The system will display an error if deletion is not allowed.
Q: A user is locked out — how do I unlock them? A: Go to User Setup > Locked User to view and unlock locked accounts. Accounts may lock after multiple failed login attempts.
Q: Can a user have multiple roles? A: Each user is assigned one role. To combine permissions, create a custom role with the needed privileges in Role Setup and Privileges Setup.
Q: Why can't a user see certain menus? A: Their role may not have the required privileges. Check Privileges Setup for the user's assigned role.
Use Setup to manage and configure this feature in your EQuipWeb system.
| Issue | Possible Cause | Solution |
|---|---|---|
| Cannot save the record | Required fields are empty or invalid | Check all fields marked with * and fill in valid data |
| Record not appearing in POS | POS terminal has not synced yet | Wait for the next sync cycle or manually trigger sync from Terminal Status |
| Cannot delete the record | Record is being used by other modules | Check if the record is linked to active transactions, products, or other settings |
| Changes not taking effect | Browser cache showing old data | Refresh the page (Ctrl+F5) or clear browser cache |
| "Duplicate" error on save | A record with the same name/code already exists | Search the list (including deleted records) for duplicates |
| Page not loading | Session expired or network issue | Log out and log back in. Check your internet connection |
Use Setup to manage and configure this feature in your EQuipWeb system.
Use Setup to manage and configure this feature in your EQuipWeb system.
[!NOTE] The following items may vary depending on your system version and configuration:
- Exact permission settings depend on your Privileges Setup configuration
- Sync timing to POS terminals depends on network conditions and sync schedule
- Some features may require additional licensing or module activation
- Field behavior may differ between EQuip versions
If you encounter behavior not described in this manual, contact your system administrator or EQuip support team.