> For the complete documentation index, see [llms.txt](https://vezolve.gitbook.io/activebooks/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://vezolve.gitbook.io/activebooks/email/users-and-permissions/untitled-4.md).
# User Permissions
It is a way of restricting user access to particular documents.
* Role based permissions allow setting complete access to a document type like Sales Invoice, Orders, Quotations etc.
* If you assign a Sales User role to a user, they can access all the Sales Orders and Quotations.
* User Permissions can be used to restrict access to select documents based on the link fields in the document.
* For example, consider that you do business with multiple territories and you want to restrict access of certain Sales Users to Quotations/Sales Order belonging to a particular territory.
* This can be done via User Permissions.
* The restrictions can be set on Customer, Supplier, Customer Group, Supplier Group, etc.
**Setting User Permissions are particularly useful when you want to restrict based on:**
1. Allowing user to access data belonging to one Company
2. Allowing user to access data related to a specific Customer or Territory
**You can access User Permission via:**
Users > Permissions > User Permissions Or Type 'New User Permission'
**How to create User Permissions?**
1. Go to the User Permissions list.
2. Select the user for which the rule has to be applied.
3. Select the type of document to be allowed (for example "Company").
4. Under For Value, select the specific item that you want to allow (the name of the "Company).
5. If you check 'Is Default', the value selected in 'For Value' will be used by default for any future transactions by this user. That is if company 'Celine' is selected as 'For Value', this Company will be set as default for all future transactions by this user.
### 2. More User Permission actions[ ](https://docs.erpnext.com/docs/v13/user/manual/en/setting-up/users-and-permissions/user-permissions#2-more-user-permission-actions)
#### 2.1 Advanced Control[ ](https://docs.erpnext.com/docs/v13/user/manual/en/setting-up/users-and-permissions/user-permissions#21-advanced-control)
In Advanced Control, you can have better command over where the User Permission is applied.
#### 2.1.1. Applicable For[ ](https://docs.erpnext.com/docs/v13/user/manual/en/setting-up/users-and-permissions/user-permissions#211-applicable-for)
You can optionally apply user permissions only for specific document type by setting the Document Type after unchecking the Apply To All Document Types checkbox. Setting **Applicable For** option will make the current user permission applicable only under the selected Document Type master.
In the above user permission, the user will be able to access only sales orders of selected company.
**Note:** If **Applicable For** is not set, User Permission will apply across all related Document Types.
#### 2.1.2. Hide Descendants[ ](https://docs.erpnext.com/docs/v13/user/manual/en/setting-up/users-and-permissions/user-permissions#212-hide-descendants)
The value of **Allow** could be a DocType with a Tree View, which will have records with a parent-child or ancestor-descendant relationship.
Let's assume **For Value**, 'Celine', has a child company 'Fendy'. When a User Permission is created for 'Celine', permissions for its descendants are granted as well.
**Hide Descendants** is visible only on selecting a Tree View DocType. By enabling this checkbox, permissions for descendants of **For Value** will not be granted.
Example : A user that can view records of 'Celine' will not be able to view those of 'Fendy'.
#### 2.2 Ignoring User Permissions on Certain Fields
#### 2.3 Strict Permissions
#### 2.4 Checking How User Permissions are Applied