Articles in this section
Authenticate Emails with SPF, DKIM, and SenderID Auto forward your emails to Vtiger Managing User Profiles Automate Outgoing Emails in Email Settings Automation - Approvals Automation - Assignment Rules Set up Multi-path Workflows Creating a Scheduled Workflow Automation - Scheduler Creating a Workflow Webforms in Vtiger CRM Set up a Workflow Action to Create Event Set up a Workflow Action to Create Records Set up a Workflow Action to Create Task Set up a Workflow Action to Invoke Custom Function Set up a Workflow Action to Create an SMS Task Set up a Workflow Action to Send Mails Set up a Workflow Action to Update Fields Automation - Workflow Action - Webhook Automation - Workflows - Vtiger Expressions Configuration - Business Hours Configuration - Company Details Configuration - Consents Configuration - Customer Portal Maps in Vtiger CRM Configuration - Usage Details Configuring Encrypted Data Fields in Vtiger CRM Configure Picklist Dependencies Considerations for Deactivating Vtiger Users Control Fields and Record Displays using Configuration Editor Create Reminders for Records and Inbox Create a field of a Grid type Dealing with Currencies and Taxes Enable Desktop Notifications on Chrome Web Browsers Vtiger CRM Add-ons IMAP Configuration - 2-way sync between Vtiger and IMAP providers Setting up Autopay & Payment Gateways Inventory - Tax Management Inventory - Terms and Conditions Login to Vtiger on SSO SAML using ADFS Mailroom Functionality for Different Scenarios Manage Multiple Currencies Marketing and Sales - Deal to Project Mapping Marketing and Sales - Lead Conversion Data Mapping Marketing and Sales - Profile Scoring Module Management - Labels Editor Module Management - Module Numbering Configure My Preferences Feature My Preferences - Calendar Settings Tags in Vtiger My Preferences - Notification Preferences SAML Support in Vtiger CRM Vtiger Mailroom Settings - Configure Module Settings Settings - Create Dynamic Fields and Layouts Module Management - Creating a Relationship Between Modules Settings - Customize Records and Fields for your Business Settings - How to set email autoresponder to Webform submission? Settings - Left Menu Settings - Manage Global Picklists in Vtiger Settings - Set up your Support Team Settings - Start Up Page Settings - Working with Picklist Values Module Management - Module Builder Support - SLA Policies Troubleshooting Login Issues Add-Edit Unsubscribe Links in your Email Template User Management - Authentication User Management - Encrypted Field Access Logs User Management - Groups User Management - Login History User Management - Roles User Management - Settings Log User Management - Sharing Rules User Management - Users User Management - Vtiger Support Access Vtiger Buzz - Chrome Extension for Notifications Vtiger Implementation wizard Vtiger Language Support Configuring Websense Trackers Websense - Widgets Module Management - Module Layouts & Fields Generate and Manage Third-party App Passwords in Yahoo Configuring App Passwords for Gmail Outgoing Server and Yahoo Mail Configuration - Storage Guard Customizing your Self-Service Portal Theme Using CSS Styles Automation - SMS Reply Actions Adding Hidden Fields to a Webform Configuring Dependent Fields and Blocks for Modules Auto forward Emails from Microsoft Office 365 Adding Custom Module Login Page Customization Settings - Personalize Module Layouts Module Management - Modules Duplicate Prevention in Modules Formula Fields Creating Custom Filters Adding a local DNS Entry

User Management - Profiles

Learn how to set up user profiles with this article.
R
Ruba
18 Feb, 2025 - Updated  1 month ago

Introduction

Wish you could regulate a user’s action on CRM records? 

 

Well, there’s a simple way to do that. Vtiger CRM allows you to define permissions for users to give them full or restricted access to CRM modules and records. 

 

Read along to find out how!

 

A CRM profile defines what actions a user can perform on CRM records. You can have different profiles such as Sales, Support, Marketing, etc. 
When a profile is associated with a role, the access rights defined in the profile are applied to all users having the role. 

 

Only Admin users are allowed by default to set up Profiles for other users.

 

Note: Users with roles in the upper hierarchy of the organization can always view records of users with roles in the lower hierarchy.

Feature Availability and Limits

 

Sales/Help Desk Starter

Sales/Help Desk Professional

Sales/Help Desk Enterprise

All-in-One Professional

All-in-One Enterprise

Profiles

Limits on Profiles

Maximum number of profiles

5

25

250

25

250

 

Note: The maximum number of profiles in Help Desk Starter and Help Desk Professional are 5 and 25, respectively.

Creating a Profile

Creating a profile is simple, but simply creating it is not enough. 

 

To apply the permissions of a profile to a user, you must associate a role with the profile. Then, users having the associated role will have the permissions set for the profile.

 

So, here are the four steps that you must perform to complete the setup.

 

Step 1: Creating a profile

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
  4. Look for the User Management section.
  5. Select Profiles.
  6. Click the +Add Profile button.
  7. Enter the profile name and description.
 

Step 2: Defining permissions 

  1. Go to the Edit privileges of this profile section.
  2. Choose an app (Inventory, Sales, etc.) from the Edit privileges of the profile section and click the downward arrow. 
  3. Choose a module. Enable or disable the checkbox for View, Create, Edit, or Delete to provide or revoke respective permissions for the module.
  4. Click the downward arrow on a module. All the fields in the module are shown in the Fields section.
  5. Move the toggle button beside a field to the left to make it invisible, center to make it read-only, or right to make it writable. Black color represents invisible, Orange represents read-only, and Green represents writable.
    • Note: You cannot change permissions for mandatory fields. Skip to this section to learn more about field-level permissions.
  6. Scroll down to the Tools section. Enable the checkbox to provide access to a tool. Disable it otherwise.
  7. Click Save.
 

Skip to this section to learn about permissions in detail.

 

Step 3: Linking a role with a profile

  1. Click the User Menu on the top right corner of the screen.
  2. Click Settings.
  3. Look for the User Management section.
  4. Select Roles.
  5. Click on a role to edit it.
  6. Select Assign privileges from existing profiles under Privileges.
  7. Select the profiles under Assign Profiles.
  8. Click Save.
 

Step 4: Assigning the role to users

  1. Click the User Menu on the top right corner of the CRM screen.
  2. Click Settings.
  3. Look for the User Management section.
  4. Select Users.
  5. Open a user record to set the role.
  6. Click the Edit icon on the top right side.
  7. Look for the Roles field.
  8. Select a role.
  9. Click Save.
 

To learn more about Users, click here.

To learn more about Roles, click here.

Defining Profile Permissions

Profile permissions are divided into two parts: 

  • Module permissions
  • Permissions on fields and tools

Permissions on modules

  • When you open a profile, you see the following. Inventory, Marketing, Projects, etc. are all apps.
 
  • Each app has multiple modules. When you click the downward arrow on the right side, you will see the modules. 

 
  • When you click the Edit icon on the top right side of the page, you can edit the module permissions.

  • Enable a checkbox to provide the permission mentioned in the column name.
    1. Enable the Modules checkbox to provide all permissions on all modules.
    2. Enable the checkbox beside a module name to provide all permissions on the module.
    3. Enable the checkbox beside the View, Create, Edit, or Delete to provide the respective permission on all modules.
 

Note: Do not forget to click Save after you make changes to profile permissions.

 

Permissions on fields and tools

As a CRM admin, you can decide who can view and edit field values. Also, you can allow or deny access to tools such as import, export, duplicate handling, etc. in the modules.

  • When you click the downward arrow under the Field and Tool Privileges column for a module, you will see the fields in the module. Move the toggle button beside a field to control its permissions. 
    • Left, Black = Field is invisible
    • Centre, Orange = Field is read-only
    • Right, Green = Field is writable (editable)
 
  • In addition, you will also see tools relevant to the module by scrolling down. Enable or disable the checkbox beside a tool to control its permissions
  • Do not forget to click Save after you make changes to profile permissions. 

Note: 

  • If the Override From Email ID checkbox under the Cases > Tools is enabled, CRM users, agents, etc., can change the From email ID while replying to a Case. 
    • Users can choose the email ID only if multiple IDs have been configured for the Help desk.
  • If this field is disabled, users cannot change the From email ID.

Deleting a Profile

When you delete a profile, you must transfer the roles belonging to the profile (being deleted) to another profile. 

 

Follow these steps to delete a profile:

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
  4. Look for the User Management section.
  5. Select Profiles.
  6. Hover over a profile.
  7. Click the Delete icon.
  8. Select a profile to transfer ownership from the Transfer roles to profile drop-down.
  9. Click Save.

Profiles vs. Sharing Rules

Confused about how Profiles and Sharing Rules are different?

 

Here is a simple explanation:

Profiles define the actions that users can perform on records. 

Sharing Rules, on the other hand, define what records your users can view. 

 

Refer to the table below for more clarity.

 

Profiles→

Sharing Rules↓

Read

Read + Write

Read + Write + Delete

Private

Users can only read their records and the records of their subordinates.

 

Users cannot read + write + delete the records of their peers and superiors.

Users can read + write their records and the records of their subordinate.

 

Users cannot read + write + delete the records of their peers and superiors.

Users can read + write + delete their records and the records of their subordinates.

 

Users cannot read + write + delete the records of their  peers and superiors.

Public - Read

Users can only read the records of all the users.

 

Users cannot write + delete the records of their peers and superiors.

Users can only read + write their records and the records of their subordinates.

 

Users can read but cannot write + delete the records of their  peers and superiors.

Users can read + write + delete their records and the records of their subordinates.

 

Users can read but cannot write + delete the records of their  peers and superiors.

Public - Read + Write

Users can only read the records of all other users.

Users can only read + write the records of all other  users.

Users can read + write + delete their records and the records of their subordinates.

 

Users can read + write but cannot delete the records of their peers and superiors.

Public - Read +Write + Delete

Users can only read the records of all the users.

Users can only read + write the records of all other users.

 

Users cannot delete the records of their  peers and subordinates.

Users can read + write + delete the records of all other users.

 

Note:  Sharing Rules, Profiles, and Roles pages now display information regarding Sharing Rules, Profiles, and Roles, making it easier for you to distinguish each of them.

To learn more about sharing rules, click here.

Points to Remember

  • You can associate multiple users and profiles with the same role.
  • When you associate multiple users with the same role, the users with the role cannot see one another’s records in a module if sharing rules for the module are set to Private.
  • A role always works with respect to Profiles and Sharing Rules.
  • Sales Insights and Help Desk Insights do not follow ‘Field-level restrictions’ in a profile. Even if fields such as Amount, Sales Stages, etc., are restricted in Profiles, users who are given access permission to Sales Insights and Help Desk Insights can view these fields.
Related articles
What are Sticky Notes Module Management - Module Builder Configure Profile Scoring Module Management - Modules Integrating your Facebook Account with Vtiger Social
Home Privacy Policy Terms of Service Security Center Policy & Legal Center Contact Us
© Copyright 2025 Vtiger. All rights reserved.
Powered by Vtiger
Facebook Twitter Linkedin Youtube