CRUD Permission Matrix for External Systems in GLPI with Access Matrix

Visual Create/Read/Update/Delete permission matrix with 4-layer resolution: role, groups, and individual. Centralize access control inside GLPI.

The challenge: permissions scattered in spreadsheets

Many companies control access permissions for external systems (ERP, CRM, BI, etc.) in Excel spreadsheets or shared documents. When an employee changes roles or leaves the company, updating those spreadsheets is manual, error-prone, and unaudited.

Access Matrix: centralized permissions inside GLPI

The Access Matrix brings into GLPI a visual checkbox matrix of CRUD permissions (Create, Read, Update, Delete) for each external system and its modules. You register the systems, define the roles, and check the permissions – all inside the GLPI interface.

4-layer resolution

The module resolves permissions by combining 4 sources using OR logic (the most permissive wins):

  1. User’s main role (Category, Title, or default Group in GLPI)
  2. Groups linked to the role
  3. Groups linked to the user
  4. Individual permissions assigned directly to the account

In the query tab, you can view the effective permissions of any user with badges indicating the source (Role, Group, or Individual).

Ticket integration

A dedicated tab appears in each ticket form, pre-selecting the requester and displaying their effective permissions. The technician immediately knows what the user can or cannot do in each system, without leaving the ticket.

CSV Import/Export

Migrate configurations between environments with CSV Import/Export. The module offers a preview before applying and automatic pre-import backup. Supports 21 languages.

How to get started

  1. Register the external systems and their modules in the Systems tab
  2. Define the role source in Settings
  3. Configure the CRUD matrix for each role
  4. Use the Query tab to check effective permissions

Frequently Asked Questions

The NexTool Access Matrix module creates a visual CRUD permission matrix (Create, Read, Update, Delete) with resolution by role, group, and individual user, all within GLPI.

Yes. Instead of scattered Excel spreadsheets, all permissions are centralized in GLPI, with a history of changes and automatic auditing.

Yes. Access Matrix records all permission changes with date, responsible person, and previous values, making compliance audits easier.

No. It manages permissions for external systems (ERP, CRM, BI, etc.) in a centralized way within GLPI. GLPI's own permissions continue to be managed by native profiles.

Need help?