We have long offered our customers “sample permissions” for the OnPrem solution based on the company's organizational roles. For example, there are basic roles that only contain rudimentary rights for logging in and creating (e.g. Sales Basic for creating sales documents, Purchase Basic for purchase orders, etc.). All booking functions for the respective business area are further (additional) roles, so you remain flexible, because often not everyone in a department is allowed to book. By creating smaller modules for specific tasks in addition to the basic roles, a rights concept can be set up flexibly. By using a descriptive name, a permission administrator can later recognize which permissions have been assigned to a user. With the new logic of referencing other permission sets, you also remain updateable when new versions are imported. Finally, customers can better identify themselves with their “own” roles and continue to manage permissions independently.