Administration

Users & roles

Give each person the access they need and nothing more.

Users#

Where Settings → Users

Permissions users.view users.create users.edit users.delete users.toggle-active users.reset-password

Field	What it does
Name, Email, Phone	The person's details. Email is the sign-in name.
Password	At least 8 characters, with letters and numbers, or stricter if your password policy says so.
Role	One role per user.
Branch	Limit the person to a branch.
Status	Activate or deactivate. An inactive user cannot sign in.

Filter by role, branch and status. The list shows joining date and last login. Bulk actions: Activate, Deactivate, Delete.

Roles#

Where Settings → Roles

Permissions roles.view roles.create roles.edit roles.delete

Create a role, then tick what it can do on a grid of modules and actions. Select all and Clear all speed it up. Users holding a deleted role lose the permissions it granted. System roles are listed separately from custom roles.

Default roles#

Role	Access
Company Admin	Everything.
Branch Manager	Everything except settings, users, roles and platform functions.
Accountant	Accounting, accounts, expenses, income, transfers, journal entries, periods and reports.
Sales Staff	Sales, POS, quotations, returns, customers, products, gift cards, coupons, deliveries, challans and packing slips.
Cashier	POS access, hold orders, create and view sales, view and add customers, view products.
Warehouse Staff	Inventory, warehouses, transfers, adjustments, stock counts, damage stock and products.
Purchase Staff	Purchases, purchase returns, requisitions, suppliers and products.
HR Manager	HR, employees, departments, designations, shifts, attendance, leaves, holidays, payroll, overtime and reports.
Brand Manager	Same operational access as Branch Manager.

Note

The Brand Manager role has the same company-wide permissions as Branch Manager. It does not yet restrict a user to the records of one brand.

How permissions are named#

Each module has four permissions, view, create, edit and delete, written module.action, for example products.edit. Modules with permissions:

products, categories, brands, units, variants, barcodes, customer-groups, sale-agents, sales, pos, pos-staff, cash-registers, quotations, quotation-templates, sale-returns, sale-exchanges, purchases, purchase-returns, purchase-requisitions, inventory, warehouses, branches, transfers, adjustments, stock-counts, damage-stock, customers, suppliers, gift-cards, coupons, reward-points, discount-plans, discounts, couriers, deliveries, delivery-challans, packing-slips, accounts, expenses, expense-categories, incomes, income-categories, money-transfers, accounting, journal-entries, accounting-periods, installments, hrm, employees, departments, designations, shifts, attendance, leaves, holidays, payroll, overtime, reports, settings, users, roles, groups, company-brands.

Extra permissions#

Permission	Allows
pos.access	Open the POS terminal.
pos.void	Void items or sales at the POS.
pos.hold-order	Park a cart.
sales.approve	Approve sales that need approval.
accounting.close-period	Close or lock accounting periods.
accounting.manual-journal	Post manual journal entries.
reports.export	Export reports.
reports.scheduled	Schedule reports.
settings.general, settings.mail, settings.sms, settings.payment-gateways	Open those settings pages.
users.toggle-active, users.reset-password	Activate or deactivate users, and reset passwords.
platform.manage-companies, platform.manage-plans, platform.impersonate	Platform-level functions for owners.