Add users and grant permissions

Everyone who works in Sahab for your company needs a user and a role. The role decides what the person does: sell, receive goods, approve expenses. Add people under Workspace → Users, and build roles that fit the work under Roles & permissions.

Before you start

• Only the owner manages users and roles, unless they give someone else that permission through a role.
• Only the owner assigns the Owner role, and nobody can change their own permissions.

Add a user

1. Open Workspace → Users and press Add user.
2. Type the Name and the Email.
3. Under How should they get access?, pick one:
   • Set password now: you type a password and share it with them; they change it at their first sign-in.
   • Send invitation: they get a link to set their own password and join.
   • Employee without a login: for someone who never signs in to Sahab. Their attendance is recorded and their salary paid without an email.
4. Pick the Company role: Owner, Manager, Cashier or Staff.
5. Pick the Default home, the page they land on after signing in.
6. Press Create user, Send invite or Add employee, depending on what you picked in step 3.

An invitation that hasn't been accepted yet appears under Waiting for acceptance, where you can send it again with Resend invitation or cancel it with Cancel invitation.

When someone leaves, press Deactivate in their row; they lose access to the company until you activate them again. Remove from company removes their membership in the company; their Sahab account stays.

Built-in roles and your own roles

Open Workspace → Roles & permissions. System roles holds the four built-in roles, which are read-only. Staff can sign in to the workspace, record their own attendance and see their payslips; everything else they do comes from the roles you assign them.

To build your own role:

1. Under Start from a template, pick a template close to the job, such as Accountant, and press Use template. Or press New role, or Copy into a new role on one of the system roles.
2. Type the Name (Arabic) and the Name (English).
3. Under Permissions, tick what the role needs. A Sensitive permission changes money, stock, permissions or company settings.
4. Press Save role.

A template is only a starting point: nobody gets anything until you assign the role. To see how two roles differ, press Compare roles.

Assign a role to someone

1. In Users, press Access in the person's row.
2. Under Assign a role, pick the Role.
3. Under Where, pick Whole company, or Branches or Locations and then tick them.
4. If the role is temporary, pick a date in Ends on (optional).
5. Press Assign a role.

Under Exceptions for this person you allow or deny one permission for this person alone: pick the permission, choose Allow or Deny, then press Add exception. A deny always wins. Effective permissions shows what the person can do right now, and why.

Note: Changes to a role apply at once to everyone it is assigned to.

Tip: Give each person the least they need for their job, and limit it to their branch or location. A scoped role is easier to review than many exceptions.

What's next

• Accept an invitation to a company — what the person sees when the invitation arrives.
• Configuration Studio — company decisions that apply to everyone.
• Clock in and out — where attendance is recorded for an employee without a login.