After CiviCRM install, can not get user into back-end CiviCRM Interface

[paco]

I am having difficulty adding a user to get back-end access into CiviCRM.  When ever they click to access the CiviCRM icon the get the error in the attached photo.

We have everything up to date.  The user is set to manager role on Joomla.  I have played with all the access controls in Joomla and can quite seem to find out what is holding him back and giving him the error.  I have tried giving him Joomla super user and this is the only way he can have access which I do not want to grant.  It gets the error on Admin and Manager.  I want to find a way that I can grant him minimal access so he could mainly get access to the CiviCRM and not the whole entire Joomla site.

I have tried making adjustments in the CiviCRM Admin panels and add roles and acls is not working.

(com_civicrm_configuration)  I have tried playing around adjusting the action in this panel and was wondering which ones I should "allow" so I can get this user access.  I made a group called CiviCRM Users nested under managers so hopefully, I will be able to get the right details on which one to select for a CiviCRM Admin role and which ones that could manage a single Civi Functional Area.

I was wondering if anyone else had any step by step instructions so I can clear up this error and get him working.

[joanne]

Have you given this role access civicrm permissions?

[paco]

Yes, I started allowing all the various permissions and it started working.  However,  I want to make sure I am only giving the necessary permissions required to have access and do the job and that is what I am not sure about.

If you could tell me which are the critical functions to read, view, input data, and so on.

It would be nice if someone had a template of various roles:

Admin
Data Input
Registered User
Case Manager
Volunteer

If someone has some templates with how they have there access configured, I would be interested in seeing it and it would be very helpful.

[joanne]

You seem to be implying that all CiviCRM installations are the same and that is obviously not the case.

With the possible exception of Case Manager, which I can't comment on because I have no experience with CiviCase, the roles you have listed will have different sets of permissions depending  on the individual site requirements.

Have you read http://wiki.civicrm.org/confluence/display/CRMDOC/Default+Permissions+and+Roles and http://book.civicrm.org/user/current/initial-set-up/permissions-and-access-control/ particularly starting at Important default ACL settings, and when to change them.