Admin quick-start

Debug / error log (operator tool). The 🐛 Error Log panel in the top bar captures recent HTTP errors for support/diagnosis. It shows for SuperAdmins and for any user granted the System → Diagnostics → Read permission (Settings → Roles). It is not granted to the default read-only User role — grant it deliberately to a support/dev role when you want a specific non-SuperAdmin user to see it.

1. Create companies under the organization

Who: SuperAdmin (platform operator) only.   Where: the /admin/companies screen, then Settings → Organization to arrange the tree.

Why: every record lives under a company. A company can have a parent, so a group/holding company sits above its subsidiaries — that is your organization tree.

Create a company

1. Go to /admin/companies.
2. Click "Add company" (top-right) to open the form.
3. Fill in Name (required), Tax number, Phone, Email, Address, Currency (a dropdown of active currencies, defaults to USD), Timezone (a dropdown of IANA zones, each showing its current UTC offset — e.g. (UTC+04:00) Asia/Dubai — defaults to UTC), and Country (a dropdown — AE, US, GB, IN, SA) — the country picks the chart-of-accounts template (UAE, US, UK, India, Saudi, or the IFRS default).
4. Click "Add company" to save — it appears in the list below.
5. Use the row's "Deactivate" / "Activate" button to turn a company on or off later.

A new company is ready to use immediately. Saving a company automatically sets it up with everything accounting needs — its own chart of accounts (from the country template), default account mappings, the current fiscal year, tax presets, the standard roles (Admin / User), and a Head Office branch. You can start creating users, invoices, and journal entries right away. If a company was created before this (or you ever need to rebuild its setup), click the row's "Set up / Repair" button — it re-applies the same setup and is safe to run any number of times (it never duplicates or overwrites existing data). Currencies are a single shared catalogue across all companies.

Place the company in the org tree

1. Go to Settings → Organization — the tree shows the root company with descendants indented underneath.
2. Use a row's Parent dropdown to pick the company that sits above it. The move saves immediately.
3. Choose "No parent" to make a company top-level (a root).

Common mistakes: you cannot re-parent a company under one of its own descendants (loop) or beyond the maximum tree depth — both are rejected with an error. The Parent dropdown only shows for SuperAdmins.

2. Create branches

Who: company Admin.   Where: Settings → Branches.

Why: branches are the physical locations/offices inside a company. They scope sales, purchases, and inventory to a location, and you can restrict a user to specific branches (see section 3).

Add a branch

1. Go to Settings → Branches — a form sits on the left, the branch list on the right.
2. Fill in Name (required), Code (required, e.g. HQ / WH1), Address, City, Country, Phone, and tick Head office if this is the head office.
3. Click "Create". The branch shows up with its code, an Active badge, and a Head office badge where applicable.

Use "Edit" on a card to load it back into the form (then "Update"), or "Deactivate" to retire it (with a confirmation).

Tip: Name and Code are the only required fields — the "Create" button stays disabled until both are filled. Keep codes short and unique; they appear next to the branch name everywhere.

3. Create users and assign roles

Who: company Admin.   Where: Settings → Users (people and access) and Settings → Roles (what each role can do).

Why: users sign in and do the work; roles decide what they can see and do. Roles are per-company — each company has its own role set.

The seeded roles

Both are system roles — viewable but not deletable, and their permissions can't be edited. Create your own role for anything in between.

SuperAdmin is not in this list. It is a platform-operator grant and is not assignable from the Users screen — the system refuses to attach it through the UI.

Create a user

1. Go to Settings → Users and click "New user".
2. Enter Email and Username (required), plus first/last name (optional).
3. Tick the role chip(s) — e.g. Admin or User.
4. Pick a Password mode: Invite (default — issues an invite token), Auto (generates a password, shown once), or Manual (you type it). For Auto/Manual you can tick "Must change password".
5. Click "Create invite" or "Create". Any token/password appears in a highlighted box — click "Copy"; it's shown only once.

Roles, access, and effective access

• Change roles: click the ✎ pencil in the Roles column, tick/untick chips, click ✓ to save.
• "Access": expands company memberships — extend access down the tree with "Include descendants" (and an inherited role), and use the branch picker (no branches ticked = all branches; tick some to restrict).
• "Effective access": a read-only summary per company — how access was gained, roles, permission count, branch limits, and module seats. Use it to answer "why can/can't this person see X?"

Custom roles (Settings → Roles)

1. Click "New role", give it a Name and optional Description.
2. Tick actions in the permission matrix per module/resource; use "Toggle all" on a group header to flip a whole module.
3. Click "Save" — it becomes assignable on the Users screen.

Common mistakes: system roles (Admin, User) open in view-only mode — make a custom role instead. You can't delete a role that still has users. Roles in Company A don't exist in Company B.

4. Assign module seats

Who: organization Admin.   Where: Settings → Module Access.

Why: this controls which paid/marketplace modules each user can actually use. Installed ≠ usable — a module must be activated for the organization, then each user needs a seat.

The model in plain terms

A user only sees and uses a module when it is activated and they hold a seat.

Activate a module and assign seats

1. Go to Settings → Module Access — a table lists each installed (non-core) module with an Activated toggle and a Seats count.
2. Click the Off toggle so it flips to On (green) for the modules you want active.
3. Click "Manage seats" to expand the user list.
4. Tick the checkbox next to each user who should get access — each tick assigns a seat instantly; unticking removes it.
5. Watch the Seats column — it reads used on its own when the module is uncapped, or used / cap when a seat cap is set. When the cap is reached, the next assignment is refused with a "cap reached" message.

Tips & common mistakes: "Manage seats" appears only after a module is On — activate first. Only active users appear in the seat list. Changing your own seat updates your sidebar live. Out of seats means you hit the seat cap — that ceiling is set by the platform operator (see Subscriptions & module seats); the Module Access screen lets you seat users up to it, not change it.

Subscriptions & module seats (manual provisioning)

No automated checkout yet. For the beta there is no payment gateway and no self-service plan picker. Subscriptions are provisioned manually by the platform owner, and billing is handled out-of-band (invoice, transfer, or whatever you agree with the customer). Nothing in the product charges a card.

Why this matters: a module being installed on the deployment does not mean a company can use it. Access is built up in layers — install → activate → seat — so the same deployment can serve many companies, each entitled to a different set of modules and a different number of seats.

The layered model (Stage 29 entitlement)

Who does what

Beta provisioning flow, end to end

1. The owner creates the company under the organization (section 1) and agrees the modules and seat counts with the customer out-of-band.
2. The owner makes sure each agreed module is installed/enabled from the Marketplace, then opens Settings → Module Access for that company and activates each one.
3. The owner sets the per-module seat cap to the agreed number (or leaves it unlimited).
4. Either the owner or the company Admin then assigns seats to users via "Manage seats", up to the cap. Assignments above the cap are refused until the cap is raised.
5. The customer pays out-of-band. To change what they get later (more seats, another module), repeat: the owner raises the cap or activates the new module, then seats are assigned.

Seat cap vs. seat assignment: the cap (the ceiling) is part of manual provisioning and is set by the platform owner — the Module Access screen does not expose a field to change it. Assigning seats within that cap is day-to-day work the company Admin can do themselves. Lowering a cap below the seats already in use keeps the existing seats; it only blocks new assignments.

Quick recap

Related pages

• Admin, settings, security, audit, approvals, and notifications
• Overview, login, and dashboard
• Inventory, manufacturing, marketplace, and add-ons
• Read this guide as Markdown