Three tabs: Users, Roles and Departments. A tab appears only if you hold its permission (users, roles or departments management), and ?tab= falls back to the first one you may open.
Users
Find people. Filters: ID code, first name, last name, phone, email (partial matches, case-insensitive), department, role, status (all, active, deactivated) and a date range. The table shows 10 per page with Edit, Activate or Deactivate, and Delete on each row. There are no bulk actions and no export.
Add a user. First name, last name, email, password with confirmation, department and role are required; phone is optional. The password field has a show/hide toggle, a generator and a strength meter. The Create button stays disabled until everything is valid. The "+" beside Department and Role creates a new one on the spot, if you hold that permission.
- Creating a user sends no email. The password you set is theirs; tell them yourself.
- A duplicate email is refused (the check is an exact match).
- The phone format
09XXXXXXXXXis checked only on Farsi installs. - The new user's language is the install's language, not yours.
Deactivate or delete.
- Deactivate stops the person signing in at once, signs them out, and keeps their history. Activate brings them back. Neither asks for confirmation.
- Delete is permanent and has no Trash. Records they own that would otherwise block the delete are reassigned to you, their API keys are revoked, and the audit trail keeps their entries without a name. Use Deactivate unless you are sure.
- You cannot deactivate or delete your own account. Nothing prevents you from removing the last other admin, so keep one.
Roles
A role is a name plus a set of permissions. Add or edit opens the permission matrix, grouped by module and then by resource, with columns for read, write and delete and extra action columns. A role cannot be saved with no permission ticked, its name must be 2 to 200 characters and unique, and its code is generated for you.
- Some boxes are disabled with a tooltip: permissions that come from elsewhere, permissions that belong to platform operation, and permissions you do not hold yourself.
- The built-in Admin and Editor roles carry module-wide grants (for example all of Invoices). They show as granted in the summary but cannot be un-ticked one key at a time.
- Deactivating a role moves everyone who has it to the default role, which holds only knowledge-base reading, so they lose almost all access. Admin and Editor are not locked: deactivating Admin does this to every admin, and the page will not stop you.
- Deleting a role is refused while any user still has it; reassign them first.
- Default role and Superadmin cannot be edited, deactivated or deleted.
Departments
A department groups people. Add, rename, activate and deactivate them; a title needs at least 2 characters. The Default Department cannot be disabled or deleted. Disabling a department moves its people to the Default Department, and deleting one that still has people is refused.
Permissions of the person doing it
What you can do here is limited by what you hold: you can grant only permissions you have, and cannot touch protected accounts. See Users & Roles.