Step 6 — Creating the admin user and default roles

What this step does

Step 6 creates your system's first administrator account and sets up default permission roles for your team. The admin account has full access to all features and can manage other users, change settings, and run all reports. Permission roles (e.g., "Sales", "Finance", "Inventory") control what features each team member can access, ensuring data security and workflow clarity.

Before you start

• Decide who will be the primary administrator (usually the business owner, manager, or finance lead).
• Gather the email addresses of key team members you want to add (e.g., sales staff, inventory managers, finance team).
• Understand your team's basic structure: who should have access to invoicing, purchasing, inventory, reports, etc.?
• Note: you can add and manage users at any time after setup from Settings → Users & Roles.

Steps

1. Create the admin account. The wizard prompts you to enter:

   • Full name (of the administrator, e.g., "Ahmed Hassan")
   • Email address (the login email for this account, e.g., "ahmed@example.com")
   • Password (a strong password with at least 8 characters; write it down or use a password manager)
   • Confirm password

2. Understand the default roles. The system automatically creates standard permission groups:

   • Admin: full system access; can create users, change settings, access all reports and data.
   • Finance/Accounting: access to all financial documents (invoices, purchases, payments, accounts), reports, and ledger. Cannot manage users or change core settings.
   • Sales: access to create and manage invoices, sales receipts, and customer data. Can view reports but limited to sales-related data.
   • Purchasing: access to create and manage purchase orders and bills, manage vendor data. Limited to purchasing data.
   • Inventory: access to create and manage inventory items, warehouses, and stock transfers. Cannot access financial documents.
   • Viewer/Read-Only: can view documents and reports but cannot create or modify anything.

3. Assign team members to roles. (Optional at this step; you can add team members later.) If you want to invite team members now:

   • Click "Add Team Member" or similar.
   • Enter their name and email.
   • Assign them a default role from the list above.
   • The system will send them an invitation email with instructions to set their own password.

4. Review and confirm. Check the admin account details and role assignments, then select Complete Setup or Finish.

5. Confirm your email. You may receive a confirmation email to verify the admin account email address. Click the link in the email to activate the account.

Accounting impact

This step does not directly impact accounting. However, permission roles control who can create financial transactions, so they are critical to maintaining data integrity. For example:

• Only users with "Finance" or "Admin" role should be able to approve large purchases or adjust account balances.
• Sales users should not have access to delete or modify invoices after they are issued.

Tips & common mistakes

• Use a strong password: avoid simple passwords like "12345" or "password123". Use a mix of letters, numbers, and symbols.
• Use a company email: assign the admin account to a company email address (e.g., your company domain), not a personal one. This ensures continuity if the individual leaves.
• Do not share the admin password: the admin account is sensitive. Keep its password secure and share access only with trusted team leads.
• Add the finance team first: if you add other users, prioritize accountants or finance staff who will need to validate opening balances and set up more complex configurations.
• Roles are flexible: you can create custom roles after setup that combine permissions as needed (e.g., a "Pharmacy Manager" role with inventory + sales access). The default roles provided now are templates you can refine.
• Invitation emails: when you add team members, they receive invitation emails. If they do not see an email, check spam or resend the invitation from Settings → Users.