Users & Permissions

Users

Invite teammates from Users, assign them a role, and manage their access from one place — each user’s detail page shows their role, status, and activity.

Roles & permissions

Access in Orbit is role-based: you assign permissions to a role once, then assign users to that role, rather than configuring access per-user. Permissions fall into three categories:

• System — account-wide capabilities (e.g. managing users and roles themselves).
• Module — access to a specific module (Accounting, Sales, Purchase, CRM, and so on) and what a role can do inside it.
• Operator — day-to-day operational actions within a module.

Roles management shows every permission next to a toggle per role, so it’s a direct picture of what each role can do — not something you have to infer from testing.

Note

On Orbit Cloud, users and roles are scoped to your own account only. On self-hosted instances, there’s no cross-tenant surface at all — the whole instance is a single tenant.

Approvals

Many records that matter — Sales Orders, Payment Receipts, Journal Entries, Asset Transfers, and more — can be routed through a shared approval workflow before they take effect. See Approvals for how rules, thresholds, and approval chains are configured.

Notifications & reminders

Account-wide notifications (mentions, assignments, approvals waiting on you) appear in the header bell in real time. Reminders can be attached to any record with optional recurrence and snooze, independent of which module that record belongs to.

See also: First login & tour for where roles fit into initial setup, and Approvals for the sign-off workflow itself.