Administrators & roles

Staff accounts and their permissions live under Administration. Here you create administrators, assign each one a role, and define exactly what every role can view, add, edit and delete across the CRM. This is how you give the front desk, accounts team and network engineers the right level of access.

The Administration area

Open Administration from the sidebar to reach a set of tabs: Administrators, Roles, Partners, Locations, API Keys, Logs, Auto-Invoices and Information. The two that govern access are Administrators and Roles. Only users whose role grants administration access can open this area; everyone else sees an Access Denied message.

Administrators

The Administrators tab lists every staff account with columns for Administrator, Role, Partner, Router Access, 2FA, Status and Last Login. Use Add Administrator to create an account. The form captures a Username, Email, Password and Full Name, then a Role, a Partner (default All Partners), a Router Access level (None, Read, Write or Full) and a Helpdesk Scope (Global, Group or Restricted). An Access Settings section toggles Allow CRM Access and Allow NMS Access, sets where the user lands after login, and can restrict which OLTs they reach in the NMS. Accounts can be set Active or Disabled.

Roles & the permission matrix

The Roles tab defines reusable permission sets. Each role has a Title, a description and a permission matrix. Permissions are organised into 14 modules that mirror the CRM's navigation — Dashboard, Customers, Finance, Tickets, Resellers, Hotspot, Inventory, Notifications, Networking, Tariff Plans, Reports, Voice, Administration, Configuration and the AI assistant — and each grants four actions: View, Add, Edit and Delete. Modules expand into sub-features (for example, Customers splits into Customer List, Import Customers and Export), so you can grant fine-grained access. Expand All, Collapse All, Grant All and Revoke All speed up editing.