Home Settings

Settings

By Customer Success Team
25 articles

Security Roles & Permissions

The Seed-to-Sale software provides a menu of default security roles that determine the modules and functions users can access depending on their position or rank. Administrators can customize these roles, or create new roles altogether, to better suit the needs of their facility. However, Ample Organics recommends the licence holder adhere as closely as possible to the default security roles. mceclip0.png Select a security role from the list below to read a brief description and a list of permissions associated with the role. - Admin - CSR - CSR Super - Vault - Vault Super - QA - QA Super - Grow - Grow Super - View Only - Report Only Admin The Admin security role grants the user access to all functions across the Seed-to-Sale platform and Gun App. An Admin user is the only role with access to the User Management tab in the Settings module, where they can create new users, assign security roles, and customize available security roles and their associated permissions. Ample Organics suggests that licence holders limit Admin access to select high-ranking managers. Permissions The Admin security role includes all permissions. | | | | --- | --- | | Permission Name | Description | | address_archive | Grants permission to delete a vendor address in the Wholesale application. | | address_update | Grants permission to create or update a vendor address in the Wholesale application. | | address_read | Grants permission to delete a vendor address in the Wholesale application. | | ample_care_read | Grants permission to view and open the AmpleCare tab in the Clients module. | | ample_care_update | Grants permission to update existing clients through AmpleCare. | | ample_care_create | Grants permission to accept or reject a new client or prescription though AmpleCare. | | batch_update | Grants permission to update batches. This includes splitting or combining batches, opening a batch for harvest, marking a batch for wholesale, and destroying or restoring batch waste. | | batch_create | Grants permission to create batches. This includes creating a new batch via splitting. | | batch_read | Grants permission to view batch information. | | batch_archive | Grants permission to archive batches. | | reclaim_bottles_create | Grants permission to reclaim bottles. | | bulk_lot_transfer | Grants permission to transfer weight between Bulk Lots. | | bulk_lot_archive | Grants permission to archive Bulk Lots. | | bulk_lot_update_name | Grants permission to update a Bulk Lot's name | | bulk_lot_split | Grants permission to split Bulk Lots. | | call_log_destroy | Grants permission to delete call logs. | | call_log_update | Grants permission to update call logs. | | call_log_create | Grants permission to create call logs. | | call_log_read | Grants permission to view the Call Logs tab in the Clients module. | | casing_run_read | Grants permission to view the Casing Runs tab in the Products module, and generate casing records. | | casing_run_restock | Grants permission to restock cases. | | casing_run_create | Grants permission to create Casing Runs. | | client_delete | Grants permission to delete clients. | | client_update_client_id | Grants permission to update a client's ID string, which serves as the client's username on the Client Portal. | | client_create | Grants permission to create new clients, configure medical profiles, create new prescriptions, and create new registrations via amendment. | | client_read | Grants permission to view client information. | | client_update | Grants permission to update clients. This includes adding or removing clients from sales channels and sending emails through the Email Logs tab. | | client_archive | Grants permission to archive clients and their associated registrations. | | complaint_create | Grants permission to create complaints. | | complaint_archive | Grants permission to archive complaints. | | complaint_update | Grants permission to update complaints. This includes adding entries in the Pertains To section. | | complaint_read | Grants permission to view the Complaints module, download Complaint PDF reports, and access Complaints Reports in the Reports module. | | credit_card_create | Grants permission to log credit card information. | | credit_card_destroy | Grants permission to delete credit card information. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | | destruction_lot_archive | Grants permission to archive Destruction Lots and sublots. | | destruction_lot_create | Grants permission to create Destruction Lots and sublots. | | destruction_lot_update | Grants permission to update Destruction Lots and sublots. This includes closing, reopening, and destroying lots. | | device_create | Grants permission to add scales, printers, and other devices. | | device_update | Grants permission to update scale, printer, and other device information. | | discount_code_update | Grants permission to update discounts. | | discount_code_create | Grants permission to create discounts. | | discount_code_read | Grants permission to view discount information. | | discount_code_archive | Grants permission to archive discounts. | | apply_discount | Grants permission to apply manual discounts to orders. | | apply_discount_code | Grants permission to apply a discount code to an order. | | discount_type_create | Grants permission to create discount types. | | discount_type_read | Grants permission to view discount types. | | document_destroy | Grants permission to destroy documents. | | facility_information_read | Grants permission to view facility information in the Reports module's Settings tab. | | facility_information_update | Grants permission to update facility information on the Reports module's Settings tab. | | harvest_create | Grants permission to create harvests. | | harvest_archive | Grants permission to archive harvests. | | harvest_update | Grants permission to update harvests. This includes harvesting plants, outputting harvest weight to a Bulk Lot, destroying harvest waste, and closing or reopening harvests. | | harvest_read | Grants permission to view harvest information. | | lab_report_archive | Grants permission to archive lab reports. | | lab_report_update | Grants permission to update lab reports. This includes updating lab report information, setting a public COA document, and setting a lab report as active. | | lab_report_create | Grants permission to create lab reports. | | lab_report_read | Grants permission to view lab report information. | | location_archive | Grants permission to archive locations. | | location_create | Grants permission to create locations. This includes both grow rooms and vault locations/picking bins. | | location_read | Grants permission to view location information and print location labels. | | location_update | Grants permission to update locations. | | loyalty_point_destroy | Grants permission to destroy loyalty points. | | loyalty_point_create | Grants permission to create loyalty points. | | loyalty_point_update | Grants permission to update loyalty points. | | archive_all_orders | Grants permission to archive all Shipped or Delivered orders. | | order_create | Grants permission to create orders. | | order_read | Grants permission to view the Orders module and order information. | | order_update | Grants permission to update orders. This includes adding order items, selecting shipping options, applying policy coverage, applying line item discounts, and generating receipts. | | order_archive | Grants permission to archive a Purchase Order. | | order_discounts | Grants permission to apply discounts to orders. | | order_refund | Grants permission to refund orders, including shipping costs. | | order_return_bottles_when_shipped | Grants permission to return bottles. | | order_set_delivered | Grants permission to set an order's status to Delivered. | | order_placed_reset | Grants permission to reset an order to the Placed status. | | packaging_run_archive | Grants permission to delete Packaging Runs. | | packaging_run_update | Grants permission to close and reopen Packaging Runs. | | packaging_run_set_release | Grants permission to release Packaging Runs. | | packaging_run_move | Grants permission to move Packaging Runs between SKUs. | | packaging_run_create | Grants permission to create Packaging Runs and Mass Packaging Runs. | | packaging_run_read | Grants permission to generate a Packaging Run's bottling record. | | permission_destroy | Grants permission to delete permissions. | | permission_read | Grants permission to view the menu of permissions. | | permission_update | Grants permission to update permissions. | | permission_create | Grants permission to create permissions. | | physician_update | Grants permission to update or disable physicians. | | physician_archive | Grants permission to archive and restore physicians. | | physician_create | Grants permission to create physicians. | | physician_read | Grants permission to view physician information. | | plant_read | Grants permission to view plant information and print plant labels. | | plant_create | Grants permission to create plants. | | plant_restore | Grants permission to restore destroyed plants or plant waste. | | plant_archive | Grants permission to destroy plants. | | plant_update | Grants permission to update individual plants. This includes moving a plant, advancing a plant, marking a plant for wholesale, and updating a plant's mother status. | | policy_update | Grants permission to update client policies. | | policy_unarchive | Grants permission to unarchive client policies. | | policy_archive | Grants permission to archive and unarchive client policies. | | policy_create | Grants permission to create client policies. | | policy_type_update | Grants permission to update policy types. | | policy_type_create | Grants permission to create policy types. | | policy_type_archive | Grants permission to archive and unarchive policy types. | | prescription_update | Grants permission to update, archive, and disable prescriptions. | | prescription_destroy | Grants permission to delete prescriptions. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | product_create | Grants permission to create product types, products, and SKUs. | | product_archive | Grants permission to archive products. | | product_update | Grants permission to update product types, products, and SKUs. | | production_update | Grants permission to update a production's name. | | production_archive | Grants permission to archive and restore productions. | | production_create | Grants permission to create productions. | | production_read | Grants permission to view the Productions index and Production Profiles. | | purchase_order_create | Grants permission to view, create, and update Payment Terms. | | qa_release | Grants permission to release or unrelease Bulk Lots. | | received_inventory_create | Grants permission to create Received Inventories. | | received_inventory_update | Grants permission to update Received Inventories. This includes returning the inventory | | received_inventory_finish | Grants permission to mark a Received Inventory as Finished. | | received_inventory_release | Grants permission to release Received Inventories. | | report_received_inventory_read | Grants permission to generate the Received Inventory report. | | received_inventory_revert | Grants permission to revert Received Inventory. | | received_inventory_read | Grants permission to view the Received Inventory tab in the Products module. | | refusal_create | Grants permission to refuse clients and orders. | | refusal_update | Grants permission to update order or client refusals. | | report_product_read | Grants permission to run product reports. | | report_order_read | Grants permission to run order reports. | | report_inventory_read | Grants permission to run inventory reports. | | report_hc_read | Grants permission to run Health Canada reports, including the CTLS and CRA reports. | | report_complaint_read | Grants permission to run complaints reports. | | report_grow_read | Grants permission to run reports on grow room materials. | | report_client_read | Grants permission to run client reports. | | report_physician_read | Grants permission to run physician reports. | | retention_sample_create | Grants permission to create retention samples. | | retention_sample_destroy | Grants permission to destroy retention samples. | | retention_sample_read | Grants permission to view retention samples and print retention sample labels. | | retention_sample_update | Grants permission to update retention samples. | | returned_grams_update | Grants permission to update or delete a returned grams record. | | returned_grams_create | Grants permission to return grams to a patient's prescription. | | returned_grams_delete | Grants permission to delete a returned grams record. | | sales_channel_update | Grants permission to update sales channels. This includes adding products or clients to a sales channel from the Settings module. | | sales_channel_archive | Grants permission to archive sales channels. | | sales_channel_read | Grants permission to view sales channel information. | | sales_channel_create | Grants permission to create sales channels. | | sales_order_read | Grants permission to view Sales Order information. | | sales_order_create | Grants permission to create Sales Orders. | | sales_order_update | Grants permission to update Sales Orders. | | security_role_create | Grants permission to create security roles. | | security_role_destroy | Grants permission to delete security roles. | | security_role_update | Grants permission to update or archive security roles. | | security_role_read | Grants permission to view security role information. | | seed_lot_update | Grants permission to update Seed Lots. This includes moving lots, adding seeds to lots, and moving seeds between lots. | | seed_lot_create | Grants permission to create Seed Lots. | | seed_lot_read | Grants permission to view Seed Lot information and print Seed Lot labels. | | seed_lot_archive | Grants permission to destroy seeds. | | setting_update | Grants permission to update lab report threshold defaults. | | shipment_batch_read | Grants permission to view shipment batch information and generate scan forms. | | shipment_batch_update | Grants permission to update shipment batches. This includes adding and removing orders. | | shipment_batch_archive | Grants permission to archive shipment batches. | | shipment_batch_create | Grants permission to create shipment batches. | | shipment_read | Grants permission to view shipment information. | | shipment_update | Grants permission to update shipments in the Wholesale application. | | shipment_create | Grants permission to create shipments in the Wholesale application. | | strain_update | Grants permission to update cannabis strains. | | strain_create | Grants permission to add cannabis strains. | | strain_read | Grants permission to view cannabis strain information. | | strain_archive | Grants permission to archive cannabis strains. | | tote_update | Grants permission to update totes. | | tote_create | Grants permission to create totes. | | tote_read | Grants permission to view tote information. | | tote_destroy | Grants permission to delete totes. | | report_user_admin_read | Grants permission to generate the User Admin report. | | user_destroy | Grants permission to disable and enable users. | | user_create | Grants permission to create user accounts. | | user_update | Grants permission to update users. This includes resetting a user's password and adjusting a user's security roles. | | user_read | Grants permission to view user information. | | vendor_archive | Grants permission to archive vendors in the Wholesale application. | | vendor_read | Grants permission to view vendor information and vendor contact information. | | vendor_update | Grants permission to update vendors and vendor contacts. | | website_update | Grants permission to update or archive vendor websites. | | website_read | Grants permission to view vendor website information. | | website_create | Grants permission to add vendor websites. | | weight_event_create | Grants permission to create manual weight events. | | work_order_close | Grants permission to close Work Orders. | | work_order_create | Grants permission to create Work Orders. This includes adding additional inputs to existing Work Orders. | | work_order_update | Grants permission to update Work Orders. | | work_order_finalize | Grants permission to finalize Work Orders. | | tax_type_create | Grants permission to create a tax type in the Wholesale application. | | tax_type_read | Grants permission to view tax type information. | | tax_type_update | Grants permission to update or archive tax types. | CSR The CSR security role is designed for the licence holder's team of Customer Service Representatives-or CSRs-and allows the user access to essential customer service functions in the Clients and Orders modules.This enables a user to create and manage Client Profiles, record customer complaints, and create and process orders. The CSR security role also grants the user complete access to the Discounts module, to create and modify discounts. Additionally, the user has access to the Physicians tab in the Medical Settings module, which allows them to add to and edit the index of prescribing physicians. Permissions | | | | --- | --- | | Permission Name | Description | | complaint_update | Grants permission to update complaints. This includes adding entries in the Pertains To section. | | complaint_create | Grants permission to create complaints. | | complaint_read | Grants permission to view the Complaints module, download Complaint PDF reports, and access Complaints Reports in the Reports module. | | sales_channel_read | Grants permission to view sales channel information. | | order_read | Grants permission to view the Orders module and order information. | | order_create | Grants permission to create orders. | | order_update | Grants permission to update orders. This includes adding order items, selecting shipping options, applying policy coverage, applying line item discounts, and generating receipts. | | client_read | Grants permission to view client information. | | client_create | Grants permission to create new clients, configure medical profiles, create new prescriptions, and create new registrations via amendment. | | client_update | Grants permission to update clients. This includes adding or removing clients from sales channels and sending emails through the Email Logs tab. | | client_archive | Grants permission to archive clients and their associated registrations. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | order_discounts | Grants permission to apply discounts to orders. | | prescription_destroy | Grants permission to delete prescriptions. | | physician_create | Grants permission to create physicians. | | physician_read | Grants permission to view physician information. | | physician_update | Grants permission to update or disable physicians. | | physician_archive | Grants permission to archive and restore physicians. | | production_read | Grants permission to view the Productions index and Production Profiles. | | discount_code_create | Grants permission to create discounts. | | discount_code_read | Grants permission to view information in the Discounts module. | | discount_code_update | Grants permission to update discounts. | | discount_code_archive | Grants permission to archive discounts. | | apply_discount | Grants permission to apply manual discounts to orders. | | apply_discount_code | Grants permission to apply a discount code to an order. | CSR Super The CSR Super security role is designed for the licence holder's Customer Service Manager(s), and grants the user access to extended customer service functions. In addition to the permissions granted by the standard CSR security role, a CSR Super user has the authority to delete unapproved clients, update prescription information, and refund orders. The CSR Super security role also affords the user access to the Products module, where they can independently create new products and SKUs, and enables the user to create and modify sales channels in the Settings module. CSR Super is the only role, aside from Admin, with access to AmpleCare. Permissions | | | | --- | --- | | Permission Name | Description | | complaint_update | Grants permission to update complaints. This includes adding entries in the Pertains To section. | | complaint_create | Grants permission to create complaints. | | complaint_read | Grants permission to view the Complaints module, download Complaint PDF reports, and access Complaints Reports in the Reports module. | | order_read | Grants permission to view the Orders module and order information. | | order_create | Grants permission to create orders. | | order_update | Grants permission to update orders. This includes adding order items, selecting shipping options, applying policy coverage, applying line item discounts, and generating receipts. | | client_read | Grants permission to view client information. | | client_create | Grants permission to create new clients, configure medical profiles, create new prescriptions, and create new registrations via amendment. | | client_update | Grants permission to update clients. This includes adding or removing clients from sales channels and sending emails through the Email Logs tab. | | client_archive | Grants permission to archive clients and their associated registrations. | | client_delete | Grants permission to delete clients. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | product_create | Grants permission to create product types, products, and SKUs. | | product_archive | Grants permission to archive products. | | product_update | Grants permission to update product types, products, and SKUs. | | order_discounts | Grants permission to apply discounts to orders. | | sales_channel_read | Grants permission to view sales channel information. | | sales_channel_update | Grants permission to update sales channels. This includes adding products or clients to a sales channel from the Settings module. | | sales_channel_archive | Grants permission to archive sales channels. | | sales_channel_create | Grants permission to create sales channels. | | prescription_destroy | Grants permission to delete prescriptions. | | prescription_update | Grants permission to update, archive, and disable prescriptions. | | order_refund | Grants permission to refund orders, including shipping costs. | | physician_create | Grants permission to create physicians. | | physician_read | Grants permission to view physician information. | | physician_update | Grants permission to update or disable physicians. | | physician_archive | Grants permission to archive and restore physicians. | | document_destroy | Grants permission to destroy documents. | | production_read | Grants permission to view the Productions index and Production Profiles. | | discount_code_create | Grants permission to create discounts. | | discount_code_read | Grants permission to view information in the Discounts module. | | discount_code_update | Grants permission to update discounts. | | discount_code_archive | Grants permission to archive discounts. | | apply_discount | Grants permission to apply manual discounts to orders. | | apply_discount_code | Grants permission to apply a discount code to an order. | | ample_care_read | Grants permission to view and open the AmpleCare tab in the Clients module. | | ample_care_update | Grants permission to update existing clients through AmpleCare. | | ample_care_create | Grants permission to accept or reject a new client or prescription though AmpleCare. | Vault The Vault security role is designed for the licence holder's team of Packaging Associates and Fulfillment Associates, and grants the user access to essential packaging and shipping functions in the Productions and Shipping modules on the Seed-to-Sale platform, as well as to Packaging Runs and Order Fulfillment on the Gun App. This enables the user to organize bulk cannabis into totes, create Packaging Runs and Mass Packaging Runs, fulfill orders, and create and modify shipment batches. A Vault user can also move Packaging Runs between SKUs. Additionally, users with the Vault security role can view information in the Clients, Products, Orders, and Medical Settings modules, but the role restricts the user from altering data. Permissions | | | | --- | --- | | Permission Name | Description | | production_read | Grants permission to view the Productions index and Production Profiles. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | order_read | Grants permission to view the Orders module and order information. | | client_read | Grants permission to view client information. | | packaging_run_create | Grants permission to create Packaging Runs and Mass Packaging Runs. | | archive_all_orders | Grants permission to archive all Shipped or Delivered orders. | | physician_read | Grants permission to view physician information. | | tote_create | Grants permission to create totes. | | tote_update | Grants permission to update totes. | | tote_read | Grants permission to view tote information. | | sales_channel_read | Grants permission to view sales channel information. | | shipment_batch_create | Grants permission to create shipment batches. | | shipment_batch_read | Grants permission to view shipment batch information and generate scan forms. | | shipment_batch_update | Grants permission to update shipment batches. This includes adding and removing orders. | | shipment_batch_archive | Grants permission to archive shipment batches. | | packaging_run_move | Grants permission to move Packaging Runs between SKUs. | Vault Super The Vault Super security role is designed for Packaging and Fulfillment managers and supervisors, and grants the user complete access to packaging and shipping functions in the Productions and Shipping modules on the Seed-to-Sale platform, as well as the Packaging Runs and Order Fulfillment modules on the Gun App. In addition to the permissions granted by the standard Vault security role, a Vault Super user can update lab reports, destroy documents, and create and modify retention samples, vault locations, and picking bins in the Productions module. The Vault Super security role also affords the user access to the Products module, where they can independently create new products and SKUs. Vault Super is the only role, aside from Admin, with permission to archive or delete Packaging Runs. Permissions | | | | --- | --- | | Permission Name | Description | | packaging_run_create | Grants permission to create Packaging Runs and Mass Packaging Runs. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | product_create | Grants permission to create product types, products, and SKUs. | | product_archive | Grants permission to archive products. | | product_update | Grants permission to update product types, products, and SKUs. | | production_read | Grants permission to view the Productions index and Production Profiles. | | production_create | Grants permission to create productions. | | production_update | Grants permission to update a production's name. | | production_archive | Grants permission to archive and restore productions. | | weight_event_create | Grants permission to create manual weight events. | | client_read | Grants permission to view client information. | | order_read | Grants permission to view the Orders module and order information. | | sales_channel_read | Grants permission to view sales channel information. | | packaging_run_update | Grants permission to close and reopen Packaging Runs. | | packaging_run_read | Grants permission to generate a Packaging Run's bottling record. | | packaging_run_archive | Grants permission to delete Packaging Runs. | | lab_report_update | Grants permission to update lab reports. This includes updating lab report information, setting a public COA document, and setting a lab report as active. | | archive_all_orders | Grants permission to archive all Shipped or Delivered orders. | | physician_read | Grants permission to view physician information. | | document_destroy | Grants permission to destroy documents. | | packaging_run_move | Grants permission to move Packaging Runs between SKUs. | | shipment_batch_create | Grants permission to create shipment batches. | | shipment_batch_read | Grants permission to view shipment batch information and generate scan forms. | | shipment_batch_update | Grants permission to update shipment batches. This includes adding and removing orders. | | shipment_batch_archive | Grants permission to archive shipment batches. | | tote_create | Grants permission to create totes. | | tote_update | Grants permission to update totes. | | tote_destroy | Grants permission to delete totes. | | tote_read | Grants permission to view tote information. | | retention_sample_create | Grants permission to create retention samples. | | retention_sample_read | Grants permission to view retention samples and print retention sample labels. | | retention_sample_update | Grants permission to update retention samples. | | retention_sample_destroy | Grants permission to destroy retention samples. | | location_create | Grants permission to create locations. This includes both grow rooms and vault locations/picking bins. | | location_read | Grants permission to view location information and print location labels. | | location_update | Grants permission to update locations. | | location_archive | Grants permission to archive locations. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | | received_inventory_read | Grants permission to view the Received Inventory tab in the Products module. | | received_inventory_release | Grants permission to release Received Inventories. | | received_inventory_update | Grants permission to update Received Inventories. This includes returning the inventory. | | received_inventory_revert | Grants permission to revert Received Inventory. | | received_inventory_create | Grants permission to create Received Inventories. | | report_received_inventory_read | Grants permission to generate the Received Inventory report. | QA The QA security role is designed for the licence holder's Quality Assurance team, and grants the user access to basic QA functions in the Productions module. This enables the user to create and update lab reports, create and update retention samples, and manually create weight events. A QA user also has limited access to the Complaints module, where they can view, create, and update complaints from clients. Additionally, the QA security role allows the user to view information in the Clients, Orders, Products, Medical Settings, and Destruction modules, but restricts the user from altering data. Permissions | | | | --- | --- | | Permission Name | Description | | complaint_update | Grants permission to update complaints. This includes adding entries in the Pertains To section. | | complaint_create | Grants permission to create complaints. | | complaint_read | Grants permission to view the Complaints module, download Complaint PDF reports, and access Complaints Reports in the Reports module. | | lab_report_create | Grants permission to create lab reports. | | lab_report_update | Grants permission to update lab reports. This includes updating lab report information, setting a public COA document, and setting a lab report as active. | | retention_sample_create | Grants permission to create retention samples. | | retention_sample_read | Grants permission to view retention samples and print retention sample labels. | | retention_sample_update | Grants permission to update retention samples. | | sales_channel_read | Grants permission to view sales channel information. | | order_read | Grants permission to view the Orders module and order information. | | client_read | Grants permission to view client information. | | production_read | Grants permission to view the Productions index and Production Profiles. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | physician_read | Grants permission to view physician information. | | weight_event_create | Grants permission to create manual weight events. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | QA Super The QA Super security role is designed for Quality Assurance managers and supervisors, and grants the user complete access to all QA functions in the Productions module. In addition to the permissions granted by the standard QA security role, a QA Super user has the authority to create and modify Productions and Bulk Lots, create and modify vault locations and picking bins, and destroy retention samples and COA documents. A QA Super also has access to the Products module, where they can create and modify products and SKUs. The QA Super should be the only role with permission to release or unrelease Bulk Lots. Permissions | | | | --- | --- | | Permission Name | Description | | complaint_update | Grants permission to update complaints. This includes adding entries in the Pertains To section. | | complaint_create | Grants permission to create complaints. | | complaint_read | Grants permission to view the Complaints module, download Complaint PDF reports, and access Complaints Reports in the Reports module. | | lab_report_create | Grants permission to create lab reports. | | lab_report_update | Grants permission to update lab reports. This includes updating lab report information, setting a public COA document, and setting a lab report as active. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | product_create | Grants permission to create product types, products, and SKUs. | | product_archive | Grants permission to archive products. | | product_update | Grants permission to update product types, products, and SKUs. | | weight_event_create | Grants permission to create manual weight events. | | sales_channel_read | Grants permission to view sales channel information. | | order_read | Grants permission to view the Orders module and order information. | | client_read | Grants permission to view client information. | | production_read | Grants permission to view the Productions index and Production Profiles. | | production_update | Grants permission to update a production's name. | | production_create | Grants permission to create productions. | | production_archive | Grants permission to archive and restore productions. | | qa_release | Grants permission to release or unrelease Bulk Lots. | | packaging_run_update | Grants permission to close and reopen Packaging Runs. | | archive_all_orders | Grants permission to archive all Shipped or Delivered orders. | | physician_read | Grants permission to view physician information. | | document_destroy | Grants permission to destroy documents. | | retention_sample_create | Grants permission to create retention samples. | | retention_sample_read | Grants permission to view retention samples and print retention sample labels. | | retention_sample_update | Grants permission to update retention samples. | | retention_sample_destroy | Grants permission to destroy retention samples. | | location_create | Grants permission to create locations. This includes both grow rooms and vault locations/picking bins. | | location_read | Grants permission to view location information and print location labels. | | location_update | Grants permission to update locations. | | location_archive | Grants permission to archive locations. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | | received_inventory_read | Grants permission to view the Received Inventory tab in the Products module. | | received_inventory_release | Grants permission to release Received Inventories. | | received_inventory_update | Grants permission to update Received Inventories. This includes returning the inventory. | | received_inventory_revert | Grants permission to revert Received Inventory. | | received_inventory_create | Grants permission to create Received Inventories. | | report_received_inventory_read | Grants permission to generate the Received Inventory report. | | bulk_lot_transfer | Grants permission to transfer weight between Bulk Lots. | | bulk_lot_split | Grants permission to split Bulk Lots. | | bulk_lot_archive | Grants permission to archive Bulk Lots. | Grow The Grow security role is designed for Grow Technicians, and grants the user basic access to the Grow module and the corresponding Grow Room module on the Gun App. This enables the user to perform basic grow room functions such as creating batches and moving or advancing plants. Permissions | | | | --- | --- | | Permission Name | Description | | seed_lot_read | Grants permission to view Seed Lot information and print Seed Lot labels. | | seed_lot_update | Grants permission to update Seed Lots. This includes moving lots, adding seeds to lots, and moving seeds between lots. | | strain_read | Grants permission to view cannabis strain information. | | batch_create | Grants permission to create batches. This includes creating a new batch via splitting. | | batch_read | Grants permission to view batch information. | | batch_update | Grants permission to update batches. This includes splitting or combining batches, opening a batch for harvest, marking a batch for wholesale, and destroying or restoring batch waste. | | plant_create | Grants permission to create plants. | | plant_read | Grants permission to view plant information and print plant labels. | | plant_update | Grants permission to update individual plants. This includes moving a plant, advancing a plant, marking a plant for wholesale, and updating a plant's mother status. | | plant_archive | Grants permission to destroy plants. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | | harvest_read | Grants permission to view harvest information. | Grow Super The Grow Super security role is designed for Grow Room managers and supervisors, and grants the user complete access to all functions within the Grow module and the corresponding Grow Room module on the Gun App. In addition to the permissions granted by the standard Grow security role, a Grow Super user has the authority to create new Seed Lots, create new strains, perform harvests, and destroy plant material. The Grow Super also has increased access to the Destruction module, and can create, close, and destroy Destruction Lots. Permissions | | | | --- | --- | | Permission Name | Description | | seed_lot_create | Grants permission to create Seed Lots. | | seed_lot_read | Grants permission to view Seed Lot information and print Seed Lot labels. | | seed_lot_update | Grants permission to update Seed Lots. This includes moving lots, adding seeds to lots, and moving seeds between lots. | | strain_create | Grants permission to add cannabis strains. | | strain_read | Grants permission to view cannabis strain information. | | strain_update | Grants permission to update cannabis strains. | | strain_archive | Grants permission to archive cannabis strains. | | batch_create | Grants permission to create batches. This includes creating a new batch via splitting. | | batch_read | Grants permission to view batch information. | | batch_update | Grants permission to update batches. This includes splitting or combining batches, opening a batch for harvest, marking a batch for wholesale, and destroying or restoring batch waste. | | batch_archive | Grants permission to archive batches. | | plant_create | Grants permission to create plants. | | plant_read | Grants permission to view plant information and print plant labels. | | plant_update | Grants permission to update individual plants. This includes moving a plant, advancing a plant, marking a plant for wholesale, and updating a plant's mother status. | | plant_archive | Grants permission to destroy plants. | | plant_restore | Grants permission to restore destroyed plants or plant waste. | | destruction_lot_create | Grants permission to create Destruction Lots and sublots. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | | destruction_lot_update | Grants permission to update Destruction Lots and sublots. This includes closing, reopening, and destroying lots. | | destruction_lot_archive | Grants permission to archive Destruction Lots and sublots. | | harvest_create | Grants permission to create harvests. | | harvest_read | Grants permission to view harvest information. | | harvest_update | Grants permission to update harvests. This includes harvesting plants, outputting harvest weight to a Bulk Lot, destroying harvest waste, and closing or reopening harvests. | | harvest_archive | Grants permission to archive harvests. | View Only The View Only security role allows the user to view all modules and pages on the Seed-to-Sale platform, but restricts the user from altering data. Permissions | | | | --- | --- | | Permission Name | Description | | client_read | Grants permission to view client information. | | order_read | Grants permission to view the Orders module and order information. | | sales_channel_read | Grants permission to view sales channel information. | | location_read | Grants permission to view location information and print location labels. | | physician_read | Grants permission to view physician information. | | product_read | Grants permission to view product information, print product labels, and generate product reports. | | production_read | Grants permission to view the Productions index and Production Profiles. | | lab_report_read | Grants permission to view lab report information. | | complaint_read | Grants permission to view the Complaints module, download Complaint PDF reports, and access Complaints Reports in the Reports module. | | packaging_run_read | Grants permission to generate a Packaging Run's bottling record. | | shipment_batch_read | Grants permission to view shipment batch information and generate scan forms. | Report Only The Report Only security role allows the user to generate any report in the Reports module. A Report Only user can also view information in the Grow, Medical Settings, and Destruction modules, but the role restricts the user from altering data. Permissions | | | | --- | --- | | Permission Name | Description | | sales_channel_read | Grants permission to view sales channel information. | | report_client_read | Grants permission to run client reports. | | report_physician_read | Grants permission to run phyisican reports. | | report_product_read | Grants permission to run product reports. | | report_order_read | Grants permission to run order reports. | | report_inventory_read | Grants permission to run inventory reports. | | report_hc_read | Grants permission to run Health Canada reports, including the CTLS and CRA reports. | | report_complaint_read | Grants permission to run complaints reports. | | report_sales_read | Grants permission to run sales reports. | | report_accounting_read | Grants permission to run accounting reports. | | physician_read | Grants permission to view physician information. | | destruction_lot_read | Grants permission to view the Destruction module and Destruction Lot information. | | strain_read | Grants permission to view cannabis strain information. | | batch_read | Grants permission to view batch information. | | report_grow_read | Grants permission to run reports on grow room materials. | Visit the User Management tab in the Settings module to Create a New Security Role.

Last updated on Feb 03, 2026

Ample Organics Site Structure

The Ample Organics Seed-to-Sale software breaks down into modules, such as Clients, Products, and Grow. Each module has a similar hierarchy. Module All modules are accessible from the sidebar. mceclip0.png Index/Dashboard When you open a module, you'll land on the module's index or dashboard. Indices/Dashboards provide high-level lists of all entries saved to the module. Clicking on any of these records will display a new page specific to that record. There are three exceptions to this structure, in the Grow, Reports, and Settings modules. mceclip1.png Profile Clicking on a specific entry in an index or dashboard opens the entry's Profile. This page provides an overview of the specific record selected. Most profiles include an Overview tab, along with several other tabs specific to the type of entry. Below is an example of an Order Profile. mceclip2.png Below is an example of a Client Profile. mceclip3.png Some modules contain multiple profile types. For example, in the Products module, you can access a Product Profile, SKU Profile, or Case SKU Profile. Tabs Some modules and profiles contain additional tabs that sort information by type. For example, the Grow module splits into six tabs: Overview, Propagation, Batches, Harvests, Rooms & Locations, and Settings. mceclip4.png Sub-tabs Some tabs are broken down into sub-tabs to organize information within the tab. For example, the Propagation tab in the Grow module splits into four sub-tabs: Mothers, Plant Search, Cutting Reports, and Seed Lots. mceclip5.png

Last updated on Feb 03, 2026

How to Test Features in a Preview Environment

Log in to your preview environment 1. Go to your production instance of Ample Organics, such as: yourcompany.ampleorganics.com or yourcompany.sandbox.onample.com 2. Add :444 to the end of your production URL for on-prem clients only, for example, type: yourcompany.ampleorganics.com:444 This URL is for your preview environment. This is where you can access features that have not been released to production in order to test them. Preview new features 1. Have your Ample Champion test the new features. 2. Submit any feedback or issues to support@ampleorganics.com. Each cycle will have an acceptance testing period. You will receive notice about the testing period via a release update email from our development team. Features in preview will get pushed to production after a two week testing period. Please notify us should any critical issues arise during the testing period and we will be sure to address them before any new features go live. Once the testing period has completed, you will receive a reminder email on the day the new features are launched, along with details outlining our next round of feature updates being released to preview. We value your insight and appreciate your feedback immensely, so please continue to send us suggestions or comments about how we can improve, or new features that we can add that would help you succeed. We will consider all your recommendations when evaluating needs and scheduling future release updates.

Last updated on Feb 03, 2026

Devices Tab

The Devices tab in the Settings module manages hardware, including barcode printers, label printers, and scales. mceclip0.png The Devices tab splits into two sub-tabs: Printers/Other and Scales. Printers/Other mceclip1.png The Printers/Other sub-tab tracks all printers and miscellaneous devices saved to a licence holder's system. Through the Seed-to-Sale software, you can print a variety of labels, barcodes, and documents, and each distinct printing need requires a specialized printer model. Click New to Add a New Printer. Printers must be connected to the Seed-to-Sale environment on the back end by the Ample Organics Hardware Support Team, so after adding a new printer, contact support to ensure the printer is properly configured. Scales mceclip2.png The Scales sub-tab tracks all scales saved to the licence holder's system. When adding a scale, you must record the scale's network address, which allows the Seed-to-Sale software to connect directly with the scale. This allows Grow Technicians or Packaging Associates to scan the scale's QR code when weighing cannabis to retrieve and input the weight as recorded on the scale. Connecting scales is optional. You can weigh their cannabis using offline printers and enter weights manually. Click New Scale to Add a New Scale. Visit the Hardware section for a summary of all devices necessary to complete the seed-to-sale process. For more information on Settings module tabs, visit the articles on Sales Channels, My Account, Core Default Settings, User Management,and Utilities.

Last updated on Feb 03, 2026

User Management Tab

The User Management tab lists all users saved to the Seed-to-Sale environment, and allows administrators to create, edit, and archive users and their associated security roles. mceclip0.png The User Management tab splits into two sub-tabs: Users and Security Roles. Opening the User Management tab opens the Users sub-tab by default. Users mceclip1.png The Users sub-tab lists, in tabular format, all employees at the licence holder's facility who are saved as users in the Seed-to-Sale software. The table displays high-level information about each user, including their first and last names, their security role(s), and any additional permissions they have been granted beyond their security role. A user with Admin status can click New to Create a New User, or select a user from the index to view or edit the User's Profile. An administrator or manager can also Download a User Admin Report to track changes to their user's accounts. The report tracks each user's name, username, email, security roles, and the time/date at which the user's account was last updated, disabled, or enabled. The report also tracks the last time each user's password was changed. Click the icon to disable a user. Security Roles mceclip2.png The Security Roles sub-tab lists, in tabular format, all security roles saved to the licence holder's system. A security role defines the user's role at the facility, and determines the modules and functions a user can access depending on their position or rank. Each security role has a set of associated permissions, but when creating a new user, an administrator can assign additional permissions beyond those standard to the user's security role. A Super role generally refers to full permissions for that specified role. A non-super role will have limited permissions, unless set otherwise. Though the Seed-to-Sale software offers over 200 distinct permissions, most fall into one of six categories: - Create: User can create new records. - Read: User can view existing records without the ability to edit or delete. - Update: Users can make changes to records. - Archive: Users can archive records. - Delete/Destroy: Users can delete existing records. - Restore: User can reactivate deleted or archived records. A new Seed-to-Sale environment comes with several Default Security Roles that should work for most licence holders. However, an administrator can click New to Create a Custom Security Role, or edit existing roles. For more information on Settings module tabs, visit the articles on Sales Channels, My Account, Core Default Settings, Devices, and Utilities.

Last updated on Feb 03, 2026

Core Default Settings Tab

The Core Default Settings tab allows a licence holder to store default values used throughout the Seed-to-Sale software. Presently, the Core Default Settings tab includes only one Settings Group: Lab Report Threshold Defaults. Lab Report Threshold Defaults mceclip0.png Clicking Lab Report Threshold Defaults allows QA Technicians to set cannabis potency threshold defaults for lab reports. Reporting thresholds are a series of default potency values that will display on a product's label. If the actual potency of the sample is less than the reporting threshold, the label printed will place a “<” in front of the display threshold. For example, if the display threshold is 0.8% and the actual potency is 0.5%, the label will read “<0.8%”. To accommodate the range of units of measure (UoMs) used to record potencies across different Bulk Lot types, QA Technicians can configure reporting thresholds for each cannabinoid in every unit of measure used in the Productions module. If threshold defaults are configured in the Settings module, these values will auto-populate in the Reporting Thresholds column in each new lab report, so a QA Technician only needs to alter necessary fields when an external laboratory returns a Bulk Lot's Certificate of Analysis–or COA. For more information on this process, visit the Productions module to Update a Lab Report with COA Results. Change the default values in the fields provided to Customize Lab Report Threshold Defaults. For more information on Settings module tabs, visit the articles on Sales Channels, My Account, User Management, Devices, and Utilities.

Last updated on Feb 03, 2026

Sales Channels Tab

The Sales Channels tab in the Settings module allows a licence holder to customize the list of sales channels used at their facility. Sales channels match clients to appropriate products by limiting the products available to them. When completing an order for a client, a Customer Service Representative–or CSR–cannot add a product to the client's order unless the product and client are part of the same sales channel. For example, if a client's prescription is limited to oil products, a CSR should add that client to an Oil sales channel only. All oil products should also be a part of that channel, which allows the client to view and purchase oil products, but restricts the client from purchasing other product types. Both products and clients can belong to multiple sales channels. mceclip0.png The Sales Channels tab displays a list of sales channels and summarizes the number of products and clients saved to each channel. Click New to Create a New Sales Channel, or select a Sales Channel to open the Sales Channel's Profile. Sales Channel Profile mceclip1.png The Sales Channel's Profile lists all products and clients saved to the sales channel. Click New in the Products section to Add a Product to the Sales Channel. A CSR can also Add a Product to a Sales Channel from the Product's Profile. Click New in the Clients section to Add a Client to the Sales Channel. A CSR can also Add a Client to a Sales Channel from the Client's Profile. For more information on Settings module tabs, visit the articles on My Account, Core Default Settings, User Management, Devices, and Utilities.

Last updated on Feb 03, 2026