You are not signed in with an account that manages users, so the account list below cannot load — this is the server's own real 401/403 response, not a client-side hide. Log in above with an account that holds USER_MANAGE (Super Admin or Administrator), or ask one to provision an account via runtime-validation/scripts/createUser.js.

Create Account

Provisions a new EVR account the same way createUser.js does — a securely hashed, per-user-salted password, never stored or shown in plaintext after this form submits. Password must be at least 8 characters. The Role list below is the standard company role catalogue — these are starting templates, not rigid categories: Additional Roles and individual capability grants can be layered on afterward from the account's own Manage panel.

Accounts

Never shows a password, hash, or salt — this page cannot, since the server itself never sends them anywhere (userStore. publicView()). A locked account is shown exactly as an operator running createUser.js --list would see it; Unlock clears it immediately. Manage opens the account's full Primary Role / Additional Roles / Individual Capabilities / Scope / Effective Access / History panel below.

Manage Account:

Primary Role

The one role this account is fundamentally provisioned as. Changing it does not touch Additional Roles or individual grants below.

Additional Roles

Layer on extra departmental roles under this ONE account — e.g. an Accountant who also covers Administrator and HR Manager duties at a small company. A capability granted by more than one source is never double-granted; Effective Access below shows every real source honestly.

Individual Capabilities

Grant ONE specific capability without assigning a whole extra role — e.g. letting a Sales Officer approve Receipts without giving them every Sales Manager capability. A revoked capability always wins over anything a role would otherwise grant, and takes effect on the account's very next request.

Company / Estate Scope

Restricts this account to one Company and/or Estate on the reports/branding surfaces that support scope filtering. Leave blank for unrestricted (Super Admins are always unrestricted regardless of this setting).

Account Status

Deactivating an account blocks it from every request on its very next call — no re-login needed to take effect. The last active Super Admin cannot be deactivated.

Effective Access

Every capability this account currently has, and every real source granting it (Primary Role, an Additional Role, or an individual grant) — computed live from the account's current record, not cached.

Permission Change History

Every change ever made to this account's roles, capabilities, scope, or active status — who changed it, what it was before, what it became, and when. Never overwritten.

Legacy Estate Assignment

Platform migration tool for Estates that existed before Company tenancy was enabled. It only lists Estates with no Company owner. Once assigned, the existing Kosarix business rule locks that Estate to the Company; this screen cannot be used to move an Estate from one Company to another. Blocks, Plots, Projects, Buildings and Units resolve their Company through the Estate relationship, so the hierarchy becomes visible to the selected Company without manufacturing duplicate records.

Company Branding

Upload, replace, or remove each Company's logo. Only real PNG or JPEG files are accepted (checked by file content, not filename) and the maximum size is 2 MB. The logo is used on that Company's generated Receipt and Customer Statement PDFs — an already-approved Receipt keeps the logo that was current when it was approved, even if the Company's logo is later replaced.