System Administrator Reference Guide: Domain Settings
Overview
Domain Settings allow system administrators to manage the visibility and accessibility of system modules and roles based on defined business domains. This ensures users access only modules and functionalities relevant to their specific business requirements, simplifying user experience and enforcing role-based security.
Accessing Domain Settings
- Log in as a System Administrator.
- Navigate to: Home > Settings > Domain Settings.
Configuring Domain Settings
- Open Domain Settings.
- Under Active Domains, add or remove domains as required:
- To activate a domain, select it from the list.
- To deactivate a domain, remove it from the active list.
- Click Save to apply changes.
Effects of Domain Settings
Once domain settings are updated:
Modules Visibility:
- Only modules relevant to active domains will appear on user desktops and navigation menus.
- Modules associated with inactive domains become hidden.
Roles Restriction:
- Roles specific to inactive domains will be automatically disabled, restricting access to domain-specific data and functionalities.
- Users assigned these roles will lose associated permissions until the domain is reactivated.
User Interface (UI) Changes:
- Desktop icons and shortcuts will refresh automatically based on activated domains.
- Users experience a streamlined interface showing only necessary and relevant features.
Managing Roles and Modules by Domain
When domains are activated or deactivated, the system automatically:
- Adds or removes role assignments based on active domains.
- Restricts access to certain modules through the Module Def settings, preventing unauthorized access to modules outside the user's business scope.
Comparison: Domain Settings vs. Module Profile
| Feature | Domain Settings | Module Profile |
|---|---|---|
| Scope | Applies broadly across entire system | Applies specifically to selected users |
| Management | Centralized via domains | Customized per user or user group |
| Visibility | Module visibility controlled globally | Module visibility controlled per user |
| Role-based Permissions | Automatically manages roles per domain | Does not affect role-based permissions |
| Use-case | Ideal for broad system-wide setups | Ideal for user-specific customizations |
Best Practices
- Regularly review and update domain settings to align with evolving business processes.
- Communicate clearly to users about changes in available modules or functionalities due to domain adjustments.
- Ensure roles and permissions align correctly after each change in domain settings.
Troubleshooting
If users cannot access certain modules:
- Verify domain activation status.
- Check role assignments and restrictions under User Permissions.
If desktop icons are not updating:
- Clear cache manually via Settings > Reload or execute
frappe.clear_cache().
- Clear cache manually via Settings > Reload or execute
By managing domain settings effectively, system administrators enhance security, optimize the user experience, and maintain compliance with organizational policies.