Managing Users

Manage staff accounts and control access to Aurelia Hub.

Accessing User Management

Navigate to Settings > Users.

Creating a User

• Name — User's full name
• Email — Login email address (must be unique)
• Password — Account password (minimum length enforced)
• Roles — Assign one or more roles
• Is Active — Enable/disable the account

User Roles

Users are assigned roles that determine what they can access. See the Roles & Permissions article for details.

Common Role Setup

User Functions in the System

Users appear throughout Aurelia Hub:

• Sales — user_id tracks who processed each sale
• POS — Salesperson attribution
• Stock Movements — user_id and approved_by track who made and approved changes
• Customer Interactions — Who logged each interaction
• Gift Cards — issued_by_user_id tracks who created cards
• Account Payments — created_by tracks who created deposits
• Campaigns — created_by_user_id tracks campaign creators
• Activity Log — All user actions are logged

Account Security

• Passwords are hashed (bcrypt)
• Email addresses must be unique
• Deactivated accounts cannot log in
• Activity logging tracks all user actions for audit purposes

Best Practices

1. Individual accounts — Never share login credentials; every user needs their own account
2. Least privilege — Assign the minimum necessary roles/permissions
3. Regular review — Audit user accounts quarterly; deactivate departed staff
4. Strong passwords — Enforce password complexity requirements
5. Activity monitoring — Review activity logs for unusual behavior