# Access Manager

The Access Manager module in XoroERP enables administrators to manage user privileges by granting or restricting access to specific modules across the system. Each user is assigned a role (e.g., Admin, Accounting, Warehouse), which comes with predefined privileges. However, if a user requires access beyond their assigned role, administrators can customize their permissions using the Access Manager module, ensuring precise control over system access.

### User

A user is an individual who uses the Xoro system. A user’s access can be edited in the Access Manager, defining their system privileges and level of accessibility.

A user can have two types of access levels: Role-based & Custom.

#### Role-based Access

Within the XoroERP system, we've established a range of pre-defined roles. Each role is granted a specific set of privileges, and subsequently, a role is linked to a user profile. For instance, an Accounting role typically includes access to functionalities like Accounts and Journal Entry.

XoroERP includes a set of predefined roles, each with a specific set of privileges. When a user is created, they are assigned a role that determines their system access. For example, a user with the **Accounting** role typically has access to functionalities like Accounts and Journal Entry.

A role’s privileges can be edited in the Access Manager. Additionally, user roles can be changed from the "**User"** module if adjustments to access levels are needed.

#### How to update Role privileges?

* Go to the Access Manager module. Select 'Role' as the “Access Recipient Type” and pick the role from the “Recipient” dropdown.

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2Frs8Y6iuRjK66qsDoIG3O%2Fimage.png?alt=media&#x26;token=dfcecd04-7fa4-4349-a325-cd96a3764470" alt=""><figcaption></figcaption></figure>
* Select the privileges you want to assign to the Role and click on “Grant Access”.

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FvGLDRFhtOINuS2Kc5rPX%2Fimage.png?alt=media&#x26;token=382e73da-387b-45b2-8d8a-e1b1f4eef98c" alt=""><figcaption></figcaption></figure>
* The set of privileges will be automatically granted to the users who are assigned this role.

#### Custom Access

A user's role/privileges can be customized as per the business needs. For instance, a sales rep can be granted accounting privileges in addition to their regular access.

#### How to grant the Custom Access to a user

* In the Access Manager module, choose "User" from the dropdown and select the intended user.&#x20;

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FNxlBIRidNDjZosAXsfun%2Fimage.png?alt=media&#x26;token=f388e1b2-3551-4f35-96d5-74f5b07f86fa" alt=""><figcaption></figcaption></figure>
* Under the “Set Access Levels” section, opt for the “Custom” radio button.&#x20;

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FJi8UvtgSheQVkPpZ5GfO%2Fimage.png?alt=media&#x26;token=cfd375c0-9218-4274-a961-b815cfb55a97" alt=""><figcaption></figcaption></figure>
* Select the privileges to grant to the User and click on “Grant Access”.

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FZibjBAgHfKQfDph40YTo%2Fimage.png?alt=media&#x26;token=8bfd290a-0ae7-4168-8458-09f344d4da06" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Please note that the custom access has to be set up from scratch.
{% endhint %}

### Profile

If you want to create a set of privileges for a user without creating a new role, create a profile instead. This profile can then be assigned to other users.

#### &#x20;How to create a profile

* Access the Access Manager module and choose "Profile" as the Access Recipient Type.

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FZvkoBhCHUK9QsMVtHDOE%2Fimage.png?alt=media&#x26;token=6906503a-4ee5-4133-816c-24c61c3d8396" alt=""><figcaption></figcaption></figure>
* In the "Set Access Levels" section , pick the desired access levels and click "Save as new."

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FrN25hCShIAi3aIepBk3i%2Fimage.png?alt=media&#x26;token=8f3089fd-af69-40ef-8977-0bc56c773d36" alt=""><figcaption></figcaption></figure>
* Enter the profile name and click on "OK" to save the profile.

  <div align="left"><figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FkZqupKAKOdssM9xj7dS9%2Fimage.png?alt=media&#x26;token=1f9ef3bb-904c-4816-8117-963ebbca281e" alt=""><figcaption></figcaption></figure></div>

#### How to assign the Profile to the User

* In the Access Manager module, select “User” from the dropdown menu and pick the intended user to assign the profile.

  <figure><img src="https://3188343778-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fkf8DNCjEfcSm64PCPcmf%2Fuploads%2FV5QuApJQYXbLzrlFcGiH%2Fimage.png?alt=media&#x26;token=01940c7c-98cf-45d2-8519-e3c95e0ca57e" alt=""><figcaption></figcaption></figure>
* Under the “Set Access Levels” section, opt for the “Custom” radio button.
* Select the profile from the dropdown menu from the right corner of the screen and click on “Load”.
* The set of privileges corresponding to the selected profile will be loaded for the user. Then, click on “Grant Access” to assign the profile to the user.