ERPNext permissions for Kraal inventory workflows

Kraal reads ERPNext source records before it recommends or prepares inventory work. If ERPNext blocks those reads, Kraven keeps the Daily Board item open as a source-access blocker instead of drafting purchase orders, stock entries, or accounting changes from partial evidence.

When this applies

Use this guide when the Daily Board or Kraven says an inventory item is blocked by ERPNext source access, especially:

• Item Reorder cannot be read
• ERPNext returns a 403 or insufficient permission error
• Kraal says DocPerm admin access is needed
• inventory exceptions remain visible as source_unavailable

Recommended permission model

Kraal should not require blanket ERPNext administrator access for normal operation. The default model is:

1. Kraal detects the missing source permission.
2. Kraal explains the exact ERPNext DocType that is blocked.
3. An ERPNext System Manager grants the minimum required access.
4. The user rechecks the Daily Board in Kraal.

Only use Kraal-managed permission repair when your firm explicitly wants the Kraal integration user to manage ERPNext permissions. That requires elevated permission-administration rights and should be treated as an admin setup choice.

Minimum access for Item Reorder

For inventory exception monitoring, the Kraal integration user needs read access to:

ERPNext DocType	Minimum access	Why Kraal needs it
Item	Read	Identify active stock items and item defaults.
Bin	Read	Read on-hand and projected stock by warehouse.
Item Reorder	Read	Read reorder levels and reorder quantities.
Sales Order Item	Read	Detect demand and blocked fulfillment context.
Purchase Order Item	Read	Detect open replenishment already in progress.

If Item Reorder is blocked, Kraal cannot safely tell whether a low-stock item is truly below its reorder policy.

ERPNext admin steps

1. Sign in to ERPNext as a System Manager or another user allowed to manage role permissions.
2. Open Role Permission Manager.
3. Select Item Reorder as the DocType.
4. Select the role used by the Kraal integration user.
5. Enable Read permission.
6. Save the permission.
7. If your ERPNext instance caches permissions, clear the permission cache or sign the integration user out and back in.
8. Return to Kraal and recheck the Daily Board or ask Kraven to capture inventory context again.

Why DocPerm appears in the error

DocPerm is ERPNext's permission table. It controls which roles can read, create, edit, submit, report on, or export a DocType.

Kraal can sometimes repair missing permissions automatically, but only if the integration user is allowed to read and update the relevant DocPerm rows. If Kraal lacks DocPerm access, it cannot grant itself Item Reorder access. An ERPNext admin must make the change.

What Kraal will not do automatically

Kraal will not:

• grant itself broad administrator access by default
• submit stock entries from partial inventory evidence
• create purchase orders when reorder policy cannot be read
• hide the Daily Board item just because a context capture was attempted

After the permission is fixed, Kraal rechecks ERPNext source truth. The item clears only when the source read succeeds and the inventory exception is no longer present.