# Users, Roles, and Permissions Create users and roles, manage passwords and permissions, and audit effective access. # Maintain Contact Types ### How to Maintain Contact Types in Muhasib ERP ### Overview This guide will help you create or update reusable classifications for contact information. The type becomes available to dependent contact-entry workflows. Deletion is blocked when source dependency checks find use. ### Who can do this You need access to Contact Type plus Add, Update, or Delete for the intended action. ### Before you start Agree on a short, non-duplicative naming convention and identify existing party records that use the type.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → Essentials Setup → Manage Contact Types. ### Maintain Contact Types #### Step 1: Choose New Record or select an existing type #### Step 2: Enter a clean Short Description and applicable long description Enter a clean Short Description and needed long description. #### Step 3: Choose Save for a new type or Update for a change #### Step 4: For approved removal, select the exact type and choose Delete #### Step 5: Stop if Muhasib reports the type is in use ### Check your work Reopen the record and confirm it appears correctly in a controlled party/contact workflow.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - Do not create near-duplicate names to bypass a visibility problem. - Reclassify dependencies through supported forms before any approved removal. ### Related guides - [Create a Customer](https://docs.muhasiberp.com/link/367) - [Create a Supplier](https://docs.muhasiberp.com/link/372) - [Update, Disable, or Retire a System User](https://docs.muhasiberp.com/link/184) ### What to do next
[**Create a Customer**](https://docs.muhasiberp.com/link/367).
# Configure an SMS Gateway ### How to Configure an SMS Gateway in Muhasib ERP ### Overview This guide will help you configure a reusable SMS gateway request and check it using synthetic data. The gateway can be selected by locations and used by allowed SMS workflows. Saving does not prove the endpoint accepts or correctly interprets the request. ### Who can do this You need access to SMS Settings and SMS Settings Add/Update. ### Before you start Get the vendor's endpoint, request method, recipient parameter, success code, required parameters/headers, and test credentials. Never use production recipients during setup.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → Essentials Setup → Manage SMS Settings. ### Configure an SMS Gateway #### Step 1: Choose New Record #### Step 2: Enter a Short Description and URL #### Step 3: Enter the Send To parameter name #### Step 4: Select the Request Type/method #### Step 5: Enter the expected Success Code #### Step 6: Configure only the vendor-required additional parameter key/value pairs Configure only the vendor-required more parameter key/value pairs. #### Step 7: Configure required header key/value pairs #### Step 8: Enter the supported message parameter/template behavior #### Step 9: Choose Save #### Step 10: Associate the gateway with a test location and send one Associate the gateway with a test location and send one approved test SMS. ### Check your work Confirm one sandbox/test message, expected success code, and SMS inquiry/log result without exposing credentials.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - Compare method, parameter names, encoding, headers, and success code with vendor documentation. - Do not place secrets in screenshots or article examples. ### Related guides - [Configure Location Printing and SMS](https://docs.muhasiberp.com/link/170) - [Send a Message to Multiple Recipients](https://docs.muhasiberp.com/link/262) - [Review the SMS Inquiry](https://docs.muhasiberp.com/link/498) - [Configure Diagnostic Logging Safely](https://docs.muhasiberp.com/link/200) ### What to do next
[**Configure Location Printing and SMS**](https://docs.muhasiberp.com/link/170).
# Create a System User ### How to Create a System User in Muhasib ERP ### Overview This guide will help you create an active Muhasib user, assign a role, and control whether the account may sign in. Muhasib creates the user and role association. Company access and operation rights come from the role; active and allow-login states also control authentication. ### Who can do this You need access to System Users and System Users Add. ### Before you start Create the least-privilege role first. Prepare the user's authorized identity/contact data and a unique username. Communicate credentials securely.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → User Management → Manage System Users. ### Create a System User #### Step 1: Choose New Record #### Step 2: Enter First Name and applicable Last Name, National ID, phone, Enter First Name and needed Last Name, National ID, phone, mobile, email, and address. #### Step 3: Enter a unique User Name #### Step 4: Enter a password of at least five characters or the Enter a password of at least five characters or the stronger organizational minimum. #### Step 5: Confirm the password #### Step 6: Select the intended User Role #### Step 7: Set Active User and Allow Login according to the approved Set **Active User** and **Allow Login** according to the approved start date/access state. #### Step 8: Choose Save ### Check your work Use a controlled sign-in to confirm the intended companies and least-privilege access. Do not test with production credentials on an untrusted device.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - Correct invalid email, missing username/password, short password, mismatch, or missing role. - If user capacity is reached, resolve the licence instead of deleting an account casually. ### Related guides - [Create a User Role](https://docs.muhasiberp.com/link/186) - [Grant and Revoke Muhasib Permissions](https://docs.muhasiberp.com/link/187) - [Audit a User's Effective Access](https://docs.muhasiberp.com/link/188) - [Sign In to Muhasib ERP](https://docs.muhasiberp.com/link/565) ### What to do next
[**Create a User Role**](https://docs.muhasiberp.com/link/186).
# Update, Disable, or Retire a System User ### Update, Disable, or Retire a System User ### Overview This guide will help you change a user's identity or access, disable sign-in, or retire the account while preserving audit history. Updates change authentication/access state. Source blocks deletion of a super administrator and states that historical transactions are retained for other users, but the exact removal implementation remains under verification. ### Who can do this You need access to System Users Update; System Users Delete plus explicit account-retirement approval. ### Before you start Identify the user by stable record ID and username. Review active sessions, assigned role/companies, transaction ownership, audit requirements, and replacement responsibility.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → User Management → Manage System Users. ### Update, Disable, or Retire a System User #### Step 1: Filter and select the exact user #### Step 2: For profile/access changes, edit approved fields, role, Active User, or For profile/access changes, edit approved fields, role, **Active User**, or **Allow Login**. #### Step 3: Change the password only through the authorized credential-reset process #### Step 4: Choose Update and confirm #### Step 5: For immediate access suspension, disable Allow Login and/or Active User For immediate access suspension, disable Allow Login and/or Active User before considering removal. #### Step 6: Choose Delete only with explicit approval and after reading the Choose **Delete** only with clear approval and after reading the transaction-history warning. ### Check your work Confirm sign-in is allowed or denied as intended and that historical reports/activity still identify the user.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - Do not delete an account solely to revoke access; disabling is safer when supported. - Do not reassign a user to a broad role as a temporary fix. ### Related guides - [Create a System User](https://docs.muhasiberp.com/link/183) - [Grant and Revoke Muhasib Permissions](https://docs.muhasiberp.com/link/187) - [Review User Activity](https://docs.muhasiberp.com/link/205) ### What to do next
[**Create a System User**](https://docs.muhasiberp.com/link/183).
# Update Your User Profile and Password ### How to Update Your User Profile and Password in Muhasib ERP ### Overview This guide will help you update your own Muhasib profile and password. Muhasib updates the current user record. Muhasib's check requires First Name, password, minimum length, and confirmation match. Whether an unchanged password must be re-entered may differ by installed version. ### Who can do this You need access to My User Profile. ### Before you start Choose a private password that follows organizational policy. If this device remembers credentials, plan to update or clear the remembered value.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → Settings/User menu → My User Profile. ### Update Your User Profile and Password #### Step 1: Open your profile #### Step 2: Review and update authorized identity/contact fields #### Step 3: Enter the required current/new password value according to the target-runtime Enter the required current/new password value according to the target-system form. #### Step 4: Use at least five characters and follow any stronger policy #### Step 5: Enter the same value in Confirm Password #### Step 6: Choose Update and confirm #### Step 7: Sign out and test the new password when instructed ### Check your work Sign out and sign in with the intended password. Confirm profile changes and remembered-device behavior.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - Correct mismatch before retrying. - Never send passwords through support channels. ### Related guides - [Sign In to Muhasib ERP](https://docs.muhasiberp.com/link/565) - [Resolve Muhasib Sign-In Problems](https://docs.muhasiberp.com/link/566) - [Update, Disable, or Retire a System User](https://docs.muhasiberp.com/link/184) ### What to do next
[**Sign In to Muhasib ERP**](https://docs.muhasiberp.com/link/565).
# Create a User Role ### How to Create a User Role in Muhasib ERP ### Overview This guide will help you create a least-privilege role, assign companies, and prepare it for user assignment. The role becomes available for users. Permission nodes absent because of the current plan cannot be granted through the role. ### Who can do this You need access to System Users Rights and System Users Rights Add. ### Before you start Define the job outcome, required companies, modules, reports, add/update/delete/custom actions, and segregation-of-duties restrictions.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → User Management → User Roles and Permissions. ### Create a User Role #### Step 1: Choose New Record #### Step 2: Enter a unique Role Name and useful Description #### Step 3: Select only the companies required by this role #### Step 4: Expand the permission tree #### Step 5: Grant base system access and the minimum module/view permissions #### Step 6: Grant Add, Update, Delete, printing, email, SMS, and custom rights Grant Add, Update, Delete, printing, email, SMS, and custom rights only when the job requires them. #### Step 7: Choose Save #### Step 8: Assign a controlled test user and verify effective access ### Check your work Sign in as the test user and check both allowed and prohibited tasks in each assigned company.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - Do not copy the super-administration role for ordinary users. - A missing node may indicate an unlicensed feature, not a form error. ### Related guides - [Grant and Revoke Muhasib Permissions](https://docs.muhasiberp.com/link/187) - [Audit a User's Effective Access](https://docs.muhasiberp.com/link/188) - [Create a System User](https://docs.muhasiberp.com/link/183) ### What to do next
[**Grant and Revoke Muhasib Permissions**](https://docs.muhasiberp.com/link/187).
# Grant and Revoke Muhasib Permissions ### How to Grant and Revoke Muhasib Permissions in Muhasib ERP ### Overview This guide will help you change a role's companies and action permissions, then apply the result to affected users. The role record and rights change for every assigned user. Existing sessions may keep old access until restart/re-login. Licence features still constrain available actions. ### Who can do this You need access to System Users Rights Update. ### Before you start Document the approved access change and identify all users assigned to the role. Finish critical work before forcing a restart.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → User Management → User Roles and Permissions. ### Grant and Revoke Muhasib Permissions #### Step 1: Select the exact role #### Step 2: Review assigned companies #### Step 3: Expand each relevant permission-tree branch #### Step 4: Add or remove the smallest specific rights required #### Step 5: Review destructive rights such as Delete and broad communication/reporting rights Review destructive rights such as Delete and broad communication/reporting rights separately. #### Step 6: Choose Update and confirm #### Step 7: When warned that logged-in users must restart, choose an appropriate When warned that logged-in users must restart, choose an appropriate safe restart time. #### Step 8: Test with a controlled user ### Check your work Confirm allowed actions work and revoked actions are hidden/blocked across each assigned company without granting unrelated access.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - If access remains unchanged, restart safely and re-authenticate. - If a node is absent, check feature entitlement. ### Related guides - [Create a User Role](https://docs.muhasiberp.com/link/186) - [Audit a User's Effective Access](https://docs.muhasiberp.com/link/188) - [Restart Muhasib ERP Safely](https://docs.muhasiberp.com/link/575) ### What to do next
[**Create a User Role**](https://docs.muhasiberp.com/link/186).
# Audit a User's Effective Access ### How to Audit a User's Effective Access in Muhasib ERP ### Overview This guide will help you explain and check the actions a user can actually complete without granting unnecessary access. Effective access is the intersection of account state, role/company rights, plan features/limits, terminal context, settings, and data prerequisites. ### Who can do this You need access to Authorized access to review users, roles, company assignments, and licence information. ### Before you start Record the user, role, company, terminal, plan, intended action, and exact missing/blocked behavior.
Before saving, check that the correct company is open and that you have permission to complete this task.
### Where to find it Back Office → User Management plus Licence Information and the affected module. ### Audit a User's Effective Access #### Step 1: Confirm Active User and Allow Login #### Step 2: Confirm the user's assigned role #### Step 3: Confirm the intended company is assigned to that role #### Step 4: Check the parent module/view right #### Step 5: Check the exact Add, Update, Delete, Print, Email, SMS, or custom right #### Step 6: Confirm the plan includes the feature and has available capacity #### Step 7: Check company/location/terminal registration and required configuration/data #### Step 8: Restart/re-login after authorized role or licence changes #### Step 9: Test both the permitted outcome and a prohibited control action ### Check your work Record a small access matrix showing expected versus observed results. Resolve discrepancies without broadening the role unnecessarily.
Take a moment to check your work before closing the window. This small check can save time later.
### If something goes wrong - A hidden form and a disabled operation may have different causes. - Super-administrator success does not prove an ordinary role is set up correctly. ### Related guides - [Understand Why a Module or Action Is Unavailable](https://docs.muhasiberp.com/link/569) - [Create a User Role](https://docs.muhasiberp.com/link/186) - [Grant and Revoke Muhasib Permissions](https://docs.muhasiberp.com/link/187) - [Understand Muhasib Plan Limits and Restricted Access](https://docs.muhasiberp.com/link/562) ### What to do next
[**Understand Why a Module or Action Is Unavailable**](https://docs.muhasiberp.com/link/569).