> ## Documentation Index > Fetch the complete documentation index at: https://help.kuverbooks.com/llms.txt > Use this file to discover all available pages before exploring further. # User Roles and Permissions | Control System Access > Learn how to create user roles, assign module-level permissions, and manage user access in Kuvera Arc to control what each team member can do. User Roles and Permissions is the access control module in Kuvera Arc. Use it to define what each team member can view, create, update, approve, void, or manage across inventory, sales, purchase, finance, configuration, reports, and e-commerce workflows. Roles define permissions. Users inherit permissions from their assigned role. Changes to a role apply immediately to every user assigned to that role. ## How roles and users work Roles and users work together to control system access. Define what users can see and do across modules. Assign people to roles and branches so they can work within the right scope. Control actions such as view, create, update, approve, enable, disable, and void. Limit user scope to the locations relevant to their work. ## Module tabs Manage access roles, configure module-level permissions, define allowed actions, and control visibility across Kuvera Arc. Manage user accounts, assign branches, assign roles, enable or disable accounts, and view active or inactive users. ## Access User Roles and Permissions From the left navigation panel, go to **Configuration**. Click **User Roles and Permissions**. Select **Roles and Permissions** or **Users** depending on what you need to manage. ## Roles and Permissions tab The Roles and Permissions tab lists configured access roles. Each role includes a name, description, and options menu. Some default roles are created automatically during account setup. The Super Admin role is fixed and cannot be edited or disabled. Opens the role configuration page where you can update the role name, description, discount permission, and module-level permissions. Changes apply immediately to every user assigned to that role. Deactivates the role so it can no longer be assigned to new users. System-protected roles cannot be disabled. ## Create a new role Go to **Configuration > User Roles and Permissions** and select the **Roles and Permissions** tab. Click **Add New Role**. Fill in the role name, optional description, and discount permission. Use permission checkboxes to assign the appropriate access level for each module. Click **Save Details**. The role becomes available for user assignment. ## Role information fields Required. Use a clear name that reflects the team function, such as **Sales Executive**, **Finance Manager**, or **Warehouse Manager**. Optional. Add a short explanation of the role's purpose so administrators can understand its intended scope. Optional. When enabled, users assigned to this role can apply discounts in supported sales workflows, such as sales orders or invoices. ## Permission actions Each module supports a combination of permission actions. Available checkboxes depend on what each module supports. Allows the user to open and read records or module data. Allows the user to add new records. Allows the user to edit existing records. Allows the user to activate or deactivate records. Allows the user to approve workflow records such as purchase orders, invoices, or adjustments. Allows the user to cancel or void finalized records where supported. All available actions are checked for the module. Use this for managers and senior staff who need complete control over records in that area. Only **View** is checked. Use this for users who need visibility for reporting or reference but should not modify data. No actions are checked. Use this to hide or restrict modules unrelated to a role's responsibilities. ## Permission categories Permissions are organized by module group. Controls access to the main dashboard and its summary widgets. Covers Products, Measurement Units, Product Attributes, Product Categories, Variant Products, Adjust Inventory, Barcode Mapping, Material Transfer, Stock Issue, Requisition Entry, and In Transit Stock. Covers Purchase Orders, Purchase Bills, Bill Payments, Suppliers, Debit Notes, and Goods Received Notes. Covers Sales Orders, Credit Notes, Invoices, Invoice Payments, and Customers. Covers Bank Accounts, Accounts Receivable, Accounts Payable, Cash Flow, and Cash Adjustments. Covers Company, Branch, Warehouse, Inventory Configuration, Terms and Conditions, Opening Stock, Opening Balance, and Remove Draft. Covers Tax setup, Payment Terms, and Payment Methods. Covers user management and role permission management. Restrict this category to administrators. Covers VAT Reports, Sales Reports, Purchase Reports, and Inventory Reports. Controls the ability to import and export data across modules. Covers print settings and Invoice Configuration permissions. Controls the Transfer Fiscal Year operation. Covers Notification Settings, Profile Settings, General Settings, and Plan Subscription visibility. Controls access to Ecommerce Configuration. Removing permissions from a role with active users takes effect immediately. Confirm affected users are not in critical workflows before saving permission changes. ## Users tab The Users tab lists user accounts in your system. Use it to view user details, filter by branch, edit users, disable users, or add new users. ## Access the Users tab Go to **Configuration**. Select **User Roles and Permissions**. Click the **Users** tab to view the user listing. Use the branch selector at the top of the Users tab to filter users when managing teams across multiple locations. ## User listing actions Opens the user record where you can update full name, email address, contact number, assigned role, branch assignment, and location details. Deactivates the user's account and prevents login. Disabled accounts are retained for audit and record-keeping and can be viewed through **View Inactive Users**. ## Create a new user Go to **Configuration > User Roles and Permissions > Users**. Click **Add New User**. Fill in identity, contact, login, role, branch, and optional location details. Click **Create User**. The account becomes active immediately. ## User detail fields Required. User's full name as it appears in the system. Required. Email address linked to the user account. Required. User's phone number. Optional. Uses the email address as the login username automatically. Required login username. Filled automatically if email-as-username is enabled. Required initial login password for the user. Required. Determines the user's permissions. Required. Controls the user's operational scope. Optional fields include location, city, state, and ZIP code. User accounts become active immediately after creation. Share the username and password securely with the user so they can log in. ## Key points Users inherit permissions from the role assigned to them. Editing a role affects all users assigned to that role at once. Branch assignment controls which operational data a user can access. Disabling a user removes system access immediately. The Super Admin role cannot be modified or disabled. Unchecked permissions are restricted, regardless of other settings. Restrict user configuration permissions to trusted administrators. Incorrect role or user changes can affect access across the entire workspace.