Skip to main content
Solved

granular permissions

  • June 3, 2026
  • 1 reply
  • 26 views
D

Hello 

I have attempted to apply the granular permissions, unfortunatley I have set up a housekeeper and their customised role. This user is unable to view the timeline without having significant access to sensitive financial information. Please could I have some assistance or advice on how to enable roles to be set up without giving a new user access to financial information. 

Thank you 

Best answer by josue.orellana

Hello ​@david189, 

I'm Josue, one of the Community Ambassadors, and I'm happy to help clarify your question regarding granular permissions for housekeeping roles.

What you're running into is a known limitation in Mews. Users with housekeeping permissions can currently access certain financial reports, including the accounting ledger, payment card report, payment report, and posting journal. This is a tension that some properties have flagged, and it comes down to how the current permission dependencies are structured.

Here's what you can do right now to minimise exposure:

  1. Go to Main menu > User management > Roles and open your housekeeper role.
  2. Ensure the role only has Perform housekeeping enabled, with no additional finance-related permissions toggled on.
  3. Under Advanced settings, make sure "View sensitive information" and any report-related permissions are not included.
  4. Save the role and verify by logging in as that user to confirm what they can see.

The important caveat: even with a tightly scoped housekeeping role, some financial visibility may persist due to current system dependencies. Mews has introduced a new granular permissions system where permissions are organised by business domain and configured for specific actions such as view, create, edit, delete, and export, which should give you much finer control over this. The aim is to allow configurations like "view but not export financial reports" or "see users but not create new users" — exactly the kind of separation you're looking for.

How to set up and customize user roles in Mews Operations

https://developers.mews.com/granular-permissions-in-mews/

If you're still seeing financial data accessible after tightening the role, I'd recommend opening a support case so the team can review your specific permission setup.

If you have any questions, please don't hesitate to let me know! 😎

~ Best regards, 

    1 Reply

    josue.orellana
    Community Ambassador
    Forum|alt.badge.img+1
    • josue.orellanaCommunity Ambassador
    • Community Ambassador
    • Answer
    • June 15, 2026

    Hello ​@david189, 

    I'm Josue, one of the Community Ambassadors, and I'm happy to help clarify your question regarding granular permissions for housekeeping roles.

    What you're running into is a known limitation in Mews. Users with housekeeping permissions can currently access certain financial reports, including the accounting ledger, payment card report, payment report, and posting journal. This is a tension that some properties have flagged, and it comes down to how the current permission dependencies are structured.

    Here's what you can do right now to minimise exposure:

    1. Go to Main menu > User management > Roles and open your housekeeper role.
    2. Ensure the role only has Perform housekeeping enabled, with no additional finance-related permissions toggled on.
    3. Under Advanced settings, make sure "View sensitive information" and any report-related permissions are not included.
    4. Save the role and verify by logging in as that user to confirm what they can see.

    The important caveat: even with a tightly scoped housekeeping role, some financial visibility may persist due to current system dependencies. Mews has introduced a new granular permissions system where permissions are organised by business domain and configured for specific actions such as view, create, edit, delete, and export, which should give you much finer control over this. The aim is to allow configurations like "view but not export financial reports" or "see users but not create new users" — exactly the kind of separation you're looking for.

    How to set up and customize user roles in Mews Operations

    https://developers.mews.com/granular-permissions-in-mews/

    If you're still seeing financial data accessible after tightening the role, I'd recommend opening a support case so the team can review your specific permission setup.

    If you have any questions, please don't hesitate to let me know! 😎

    ~ Best regards, 

    josue.orellana
    Terms and ConditionsAccessibility statement