Users, Roles, and Permissions

Create users and roles, manage passwords and permissions, and audit effective access.

Maintain Contact Types

How to Maintain Contact Types in Muhasib ERP

Overview

This guide will help you create or update reusable classifications for contact information.

The type becomes available to dependent contact-entry workflows. Deletion is blocked when source dependency checks find use.

Who can do this

You need access to Contact Type plus Add, Update, or Delete for the intended action.

Before you start

Agree on a short, non-duplicative naming convention and identify existing party records that use the type.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → Essentials Setup → Manage Contact Types.

Maintain Contact Types

Step 1: Choose New Record or select an existing type

Step 2: Enter a clean Short Description and applicable long description

Enter a clean Short Description and needed long description.

Step 3: Choose Save for a new type or Update for a change

Step 4: For approved removal, select the exact type and choose Delete

Step 5: Stop if Muhasib reports the type is in use

Check your work

Reopen the record and confirm it appears correctly in a controlled party/contact workflow.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Create a Customer.

Configure an SMS Gateway

How to Configure an SMS Gateway in Muhasib ERP

Overview

This guide will help you configure a reusable SMS gateway request and check it using synthetic data.

The gateway can be selected by locations and used by allowed SMS workflows. Saving does not prove the endpoint accepts or correctly interprets the request.

Who can do this

You need access to SMS Settings and SMS Settings Add/Update.

Before you start

Get the vendor's endpoint, request method, recipient parameter, success code, required parameters/headers, and test credentials. Never use production recipients during setup.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → Essentials Setup → Manage SMS Settings.

Configure an SMS Gateway

Step 1: Choose New Record

Step 2: Enter a Short Description and URL

Step 3: Enter the Send To parameter name

Step 4: Select the Request Type/method

Step 5: Enter the expected Success Code

Step 6: Configure only the vendor-required additional parameter key/value pairs

Configure only the vendor-required more parameter key/value pairs.

Step 7: Configure required header key/value pairs

Step 8: Enter the supported message parameter/template behavior

Step 9: Choose Save

Step 10: Associate the gateway with a test location and send one

Associate the gateway with a test location and send one approved test SMS.

Check your work

Confirm one sandbox/test message, expected success code, and SMS inquiry/log result without exposing credentials.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Configure Location Printing and SMS.

Create a System User

How to Create a System User in Muhasib ERP

Overview

This guide will help you create an active Muhasib user, assign a role, and control whether the account may sign in.

Muhasib creates the user and role association. Company access and operation rights come from the role; active and allow-login states also control authentication.

Who can do this

You need access to System Users and System Users Add.

Before you start

Create the least-privilege role first. Prepare the user's authorized identity/contact data and a unique username. Communicate credentials securely.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → User Management → Manage System Users.

Create a System User

Step 1: Choose New Record

Step 2: Enter First Name and applicable Last Name, National ID, phone,

Enter First Name and needed Last Name, National ID, phone, mobile, email, and address.

Step 3: Enter a unique User Name

Step 4: Enter a password of at least five characters or the

Enter a password of at least five characters or the stronger organizational minimum.

Step 5: Confirm the password

Step 6: Select the intended User Role

Step 7: Set Active User and Allow Login according to the approved

Set Active User and Allow Login according to the approved start date/access state.

Step 8: Choose Save

Check your work

Use a controlled sign-in to confirm the intended companies and least-privilege access. Do not test with production credentials on an untrusted device.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Create a User Role.

Update, Disable, or Retire a System User

Update, Disable, or Retire a System User

Overview

This guide will help you change a user's identity or access, disable sign-in, or retire the account while preserving audit history.

Updates change authentication/access state. Source blocks deletion of a super administrator and states that historical transactions are retained for other users, but the exact removal implementation remains under verification.

Who can do this

You need access to System Users Update; System Users Delete plus explicit account-retirement approval.

Before you start

Identify the user by stable record ID and username. Review active sessions, assigned role/companies, transaction ownership, audit requirements, and replacement responsibility.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → User Management → Manage System Users.

Update, Disable, or Retire a System User

Step 1: Filter and select the exact user

Step 2: For profile/access changes, edit approved fields, role, Active User, or

For profile/access changes, edit approved fields, role, Active User, or Allow Login.

Step 3: Change the password only through the authorized credential-reset process

Step 4: Choose Update and confirm

Step 5: For immediate access suspension, disable Allow Login and/or Active User

For immediate access suspension, disable Allow Login and/or Active User before considering removal.

Step 6: Choose Delete only with explicit approval and after reading the

Choose Delete only with clear approval and after reading the transaction-history warning.

Check your work

Confirm sign-in is allowed or denied as intended and that historical reports/activity still identify the user.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Create a System User.

Update Your User Profile and Password

How to Update Your User Profile and Password in Muhasib ERP

Overview

This guide will help you update your own Muhasib profile and password.

Muhasib updates the current user record. Muhasib's check requires First Name, password, minimum length, and confirmation match. Whether an unchanged password must be re-entered may differ by installed version.

Who can do this

You need access to My User Profile.

Before you start

Choose a private password that follows organizational policy. If this device remembers credentials, plan to update or clear the remembered value.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → Settings/User menu → My User Profile.

Update Your User Profile and Password

Step 1: Open your profile

Step 2: Review and update authorized identity/contact fields

Step 3: Enter the required current/new password value according to the target-runtime

Enter the required current/new password value according to the target-system form.

Step 4: Use at least five characters and follow any stronger policy

Step 5: Enter the same value in Confirm Password

Step 6: Choose Update and confirm

Step 7: Sign out and test the new password when instructed

Check your work

Sign out and sign in with the intended password. Confirm profile changes and remembered-device behavior.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Sign In to Muhasib ERP.

Create a User Role

How to Create a User Role in Muhasib ERP

Overview

This guide will help you create a least-privilege role, assign companies, and prepare it for user assignment.

The role becomes available for users. Permission nodes absent because of the current plan cannot be granted through the role.

Who can do this

You need access to System Users Rights and System Users Rights Add.

Before you start

Define the job outcome, required companies, modules, reports, add/update/delete/custom actions, and segregation-of-duties restrictions.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → User Management → User Roles and Permissions.

Create a User Role

Step 1: Choose New Record

Step 2: Enter a unique Role Name and useful Description

Step 3: Select only the companies required by this role

Step 4: Expand the permission tree

Step 5: Grant base system access and the minimum module/view permissions

Step 6: Grant Add, Update, Delete, printing, email, SMS, and custom rights

Grant Add, Update, Delete, printing, email, SMS, and custom rights only when the job requires them.

Step 7: Choose Save

Step 8: Assign a controlled test user and verify effective access

Check your work

Sign in as the test user and check both allowed and prohibited tasks in each assigned company.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Grant and Revoke Muhasib Permissions.

Grant and Revoke Muhasib Permissions

How to Grant and Revoke Muhasib Permissions in Muhasib ERP

Overview

This guide will help you change a role's companies and action permissions, then apply the result to affected users.

The role record and rights change for every assigned user. Existing sessions may keep old access until restart/re-login. Licence features still constrain available actions.

Who can do this

You need access to System Users Rights Update.

Before you start

Document the approved access change and identify all users assigned to the role. Finish critical work before forcing a restart.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → User Management → User Roles and Permissions.

Grant and Revoke Muhasib Permissions

Step 1: Select the exact role

Step 2: Review assigned companies

Step 3: Expand each relevant permission-tree branch

Step 4: Add or remove the smallest specific rights required

Step 5: Review destructive rights such as Delete and broad communication/reporting rights

Review destructive rights such as Delete and broad communication/reporting rights separately.

Step 6: Choose Update and confirm

Step 7: When warned that logged-in users must restart, choose an appropriate

When warned that logged-in users must restart, choose an appropriate safe restart time.

Step 8: Test with a controlled user

Check your work

Confirm allowed actions work and revoked actions are hidden/blocked across each assigned company without granting unrelated access.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Create a User Role.

Audit a User's Effective Access

How to Audit a User's Effective Access in Muhasib ERP

Overview

This guide will help you explain and check the actions a user can actually complete without granting unnecessary access.

Effective access is the intersection of account state, role/company rights, plan features/limits, terminal context, settings, and data prerequisites.

Who can do this

You need access to Authorized access to review users, roles, company assignments, and licence information.

Before you start

Record the user, role, company, terminal, plan, intended action, and exact missing/blocked behavior.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → User Management plus Licence Information and the affected module.

Audit a User's Effective Access

Step 1: Confirm Active User and Allow Login

Step 2: Confirm the user's assigned role

Step 3: Confirm the intended company is assigned to that role

Step 4: Check the parent module/view right

Step 5: Check the exact Add, Update, Delete, Print, Email, SMS, or custom right

Step 6: Confirm the plan includes the feature and has available capacity

Step 7: Check company/location/terminal registration and required configuration/data

Step 8: Restart/re-login after authorized role or licence changes

Step 9: Test both the permitted outcome and a prohibited control action

Check your work

Record a small access matrix showing expected versus observed results. Resolve discrepancies without broadening the role unnecessarily.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

What to do next

Understand Why a Module or Action Is Unavailable.