How to make specific fields editable for different roles without using scripts?

[pacman-24]

In Frappe/ERPNext, I have a DocType where I need different roles to edit different fields.

For example:

Role A: can edit Field A and Field B
Role B: can edit Field C and Field D
All other fields should be read-only for both roles.

Is this possible using only the standard Frappe/ERPNext UI permission configuration, such as Role Permissions Manager or field-level permissions?

I specifically want to achieve this without Client Scripts, Server Scripts, custom hooks, or any other code.

What is the recommended configuration for this use case?

[tanimomor]

Recommended Configuration (Speaking from experience)

Suppose you have:

• Role A → can edit Field A + Field B
• Role B → can edit Field C + Field D
• All other fields → read-only for both roles

Configure the fields like this:

Field	Perm Level
Field A	1
Field B	1
Field C	2
Field D	2
All other fields	0

Then configure Role Permission Manager:

Role	Level 0	Level 1	Level 2
Role A	Read + Write	Read + Write	Read
Role B	Read + Write	Read	Read + Write

Important: Level 0 is the base document permission. Both roles generally need Read + Write at Level 0 to be able to save the document. The field-level restrictions are then controlled using the higher permission levels.

For stricter separation, you can also place fields that neither role should edit at a separate permission level:

Field Group	Perm Level
Fields editable by Role A	1
Fields editable by Role B	2
Fields that neither role should edit	3

Then configure:

Role	Level 0	Level 1	Level 2	Level 3
Role A	Read + Write	Read + Write	Read	Read
Role B	Read + Write	Read	Read + Write	Read

The key concept is that Perm Level connects fields to the corresponding permission level in Role Permission Manager.

So the recommended approach is:

1. Open Customize Form for the DocType.
2. Assign different Perm Levels to the fields based on which role should be able to edit them.
3. Open Role Permission Manager.
4. Give each role Read + Write access to its assigned permission level.
5. Give both roles the required base document permission at Level 0.

This can be configured entirely through the standard Frappe/ERPNext UI. No Client Script, Server Script, custom hook, or other code is required.

[pacman-24]

Thanks