{"product_id":"access-manager-pro-advanced-access-control-for-dolibarr","title":"Access Manager Pro — advanced access control for Dolibarr","description":"\u003cdiv class=\"hero\"\u003e\n\u003ch1\u003eAccess Manager Pro — advanced access control for Dolibarr\u003c\/h1\u003e\n\u003cp\u003eDecide who sees what and who may do what in Dolibarr, with no code to write: per-object and per-field rights, interface hiding, record-level rules, passwords, sessions, delegations, a simulator and an audit trail.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003ch2\u003e\u003cbr\u003e\u003c\/h2\u003e\n\u003ch2\u003eFeatures\u003c\/h2\u003e\n\u003cdiv class=\"grid\"\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eThe access profile, a single idea\u003c\/b\u003e\u003cbr\u003eSix kinds: business, temporary restriction, external contractor, intern, read-only, audit and compliance. A profile is assigned to users, to native Dolibarr groups and to entities, with a start and an end date.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eDeny wins\u003c\/b\u003e\u003cbr\u003eA user may carry several profiles. \"Denied\" beats \"allowed\", which beats \"inherited\". The rule is written once in the engine and applied everywhere, including by the simulator and by the API.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003ePer-object rights\u003c\/b\u003e\u003cbr\u003eA catalogue of 44 real Dolibarr objects. For each one: create, read, update, delete as allowed, denied or inherited, plus read-only and the hiding of archiving, duplication, spreadsheet and export.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eP\u003c\/b\u003e\u003cb\u003eer-field rights\u003c\/b\u003e\u003cbr\u003eFive modes: normal, hidden, read-only, mandatory, external link removed. Value masked by a configurable pattern, applied on the list, on the card and on exports as you choose.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eNo-code profile builder\u003c\/b\u003e\u003cbr\u003eOne table, one row per object, four drop-downs. The whole matrix is saved in a single submission, and a row that says nothing is not stored.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eInterface: menus, buttons, tabs, filters\u003c\/b\u003e\u003cbr\u003eHiding of top and left menus with or without their children, of buttons by selector and by action code, of card tabs, of search filters, of groupings and of the column picker.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eRecord-level rules\u003c\/b\u003e\u003cbr\u003eSeveral conditions combined with AND or OR, thirteen operators including \"current user\" and \"current entity\", granting or denying the matching records. The fragment goes into the SQL of the list: the rows never leave the database.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eDocuments, exports and mass actions\u003c\/b\u003e\u003cbr\u003eRestriction of PDF templates, of CSV, Excel and Word exports, of statistics and mail merge, with a row cap, a full block and a watermark. Blocking of mass actions, from archiving to e-mailing.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003ePassword policy\u003c\/b\u003e\u003cbr\u003eValidity period, minimum length, uppercase, digit, special character, history, number of attempts and lockout duration, per profile. Per-user expiry with a countdown and lockout after N failures.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eAutomatic reminders\u003c\/b\u003e\u003cbr\u003eE-mails seven days then one day before expiry, with a send queue and a failure log, and a warning banner on every page as the deadline approaches.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\u003cb\u003e\u003c\/b\u003e\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eSessions and monitoring\u003c\/b\u003e\u003cbr\u003eA journal of logins and logouts with IP address, device, duration, pages viewed and denied accesses; an activity journal naming the rule that denied; login attempts with their failure reason.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eMonitor and log in as\u003c\/b\u003e\u003cbr\u003eWho is connected right now, forced logout, and logging in as another user with a mandatory reason and a traced duration.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003ePerimeter: delegations, IP, time windows\u003c\/b\u003e\u003cbr\u003eTemporary delegation of a profile during an absence with automatic revocation, IP address filters as allow or deny lists, and permitted time windows per day of the week.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eSimulator and access matrix\u003c\/b\u003e\u003cbr\u003eThe simulator answers, object by object, \"what does this user see and what can they do\", by asking the engine that actually applies the rules. The matrix crosses objects and profiles, one colour per verdict.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eAudit, alerts and steering\u003c\/b\u003e\u003cbr\u003eAn audit trail of every rights change with the value before and after, security alerts at three levels with a handling queue, a dashboard, 51 reports in 10 families, CSV, Excel, Word, PDF and JSON exports, a 34-route REST API.\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\u003cb\u003e\u003c\/b\u003e\u003c\/div\u003e\n\u003cdiv class=\"card\"\u003e\n\u003cb\u003eInstallable demonstration data\u003c\/b\u003e\u003cbr\u003eA complete configuration of about 4,400 rows installs on activation and uninstalls in one click, without touching a single row your users created.\u003c\/div\u003e\n\u003c\/div\u003e\n\u003ch2\u003e\u003c\/h2\u003e\n\u003ch2\u003eFunctional scope\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAccess profiles and their assignments to users, groups and entities\u003c\/li\u003e\n\u003cli\u003eCatalogue of business objects and of fields\u003c\/li\u003e\n\u003cli\u003ePer-object and per-field rules\u003c\/li\u003e\n\u003cli\u003eMenu, button, tab and filter rules\u003c\/li\u003e\n\u003cli\u003eRecord-level access rules and their conditions\u003c\/li\u003e\n\u003cli\u003eDocument, export and mass-action rules\u003c\/li\u003e\n\u003cli\u003ePassword policies, expiries and e-mail reminders\u003c\/li\u003e\n\u003cli\u003eJournals of sessions, activities and login attempts\u003c\/li\u003e\n\u003cli\u003eLog-in-as records, delegations, IP filters and time windows\u003c\/li\u003e\n\u003cli\u003eProfile templates and their lines\u003c\/li\u003e\n\u003cli\u003eAccess simulations and their verdicts\u003c\/li\u003e\n\u003cli\u003eAudit trail, security alerts and export jobs\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eGetting started\u003c\/h2\u003e\n\u003col\u003e\n\u003cli\u003eEnable the module: the 34 tables and a demonstration configuration are created.\u003c\/li\u003e\n\u003cli\u003eLeave \"administrators ignore restrictions\" on: that is what keeps you from locking yourself out of your own ERP.\u003c\/li\u003e\n\u003cli\u003eCreate a profile, assign it to a few users, and compose its restrictions in the profile builder.\u003c\/li\u003e\n\u003cli\u003eRun the profile through the simulator and check, object by object, what the user will actually be able to do.\u003c\/li\u003e\n\u003cli\u003eTurn enforcement on, then follow sessions, denied accesses and alerts from the dashboard.\u003c\/li\u003e\n\u003c\/ol\u003e\n\u003ch2\u003eTechnical information\u003c\/h2\u003e\n\u003ctable\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eCompatibility\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003eDolibarr 16 to 23, PHP 7.1 to 8.4\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eLanguages\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003eFrench, English, Spanish, Italian, German\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eBusiness objects\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003e34 objects, 400 columns, 36 vocabularies\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003ePermissions\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003e45 permissions in 16 groups\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eReports\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003e51 reports in 10 families, 5 export formats\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eREST API\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003e34 routes (26 reads, 8 writes)\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eLicence\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003eGPL v3 or later\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cb\u003eVersion\u003c\/b\u003e\u003c\/td\u003e\n\u003ctd\u003e1.0.0\u003c\/td\u003e\n\u003c\/tr\u003e\n\u003c\/tbody\u003e\n\u003c\/table\u003e\n\u003cdiv class=\"sig\"\u003eDeveloped by DoliResource\u003cbr\u003eCopyright © DoliResource\u003cbr\u003eWebsite :\u003cspan\u003e \u003c\/span\u003e\u003ca href=\"https:\/\/www.doliresource.com\"\u003ewww.doliresource.com\u003c\/a\u003e\n\u003c\/div\u003e","brand":"Dolibarr Resources","offers":[{"title":"Default Title","offer_id":54737337647422,"sku":null,"price":299.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0986\/4174\/0094\/files\/Logo_Access_Manager_Pro_24_Oct_2026_1.25_pm.png?v=1792844774","url":"https:\/\/doliresource.com\/products\/access-manager-pro-advanced-access-control-for-dolibarr","provider":"DoliResource","version":"1.0","type":"link"}