Data download
Customers download all their data from their account themselves, and you can also export it from the panel.
Work as a team, and let everyone see only their own work.
Invite your colleagues, give them one of the ready-made roles or create your own. Who changed what is written in the activity log.
At a glance
6 ready-made roles
From admin to report viewer
23 modules
View or manage
Two-factor authentication
For panel sign-ins
Activity log
Records that cannot be deleted
Roles and permissions
System / Users and roles
ExampleInvite user
| Module | Admin | Catalog editor | Order operator | Report viewer |
|---|---|---|---|---|
| Orders | Manage | Off | Manage | Off |
| Products | Manage | Manage | View | Off |
| Reports | Manage | Off | Off | View |
| Payments | Manage | Off | View | Off |
| Settings | Manage | Off | Off | Off |
"View" and "manage" permissions are granted separately for each of the 23 modules. The table is an example; you decide how the roles are set up.
Roles and permissions
Everyone sees only their own work
Your warehouse staff see the orders, your content team the products, your accountant the reports. Every screen is protected by a permission; someone with view-only permission sees the screen as read-only.
- Add users by invitation; the invite link is valid for 72 hours and can be resent
- Ready-made roles: super admin, admin, catalog editor, order operator, content editor, report viewer
- Create your own roles, with view or manage for each of the 23 modules
- You choose which notification goes to which role and email address
Activity log
System / Activity log
Cannot be deleted
Installment table changed
Ayşe Yılmaz · Garanti BBVA POS · 24 Oct 14:20
Role changed: Content editor
Ayşe Yılmaz · for Mehmet Kaya · 24 Oct 11:02
Failed sign-in attempts, account temporarily locked
System · Burak Demir · 23 Oct 18:45
Customer list exported
Ayşe Yılmaz · with extra authorization · 23 Oct 09:30
Trendyol connection setting changed
Can Öztürk · 22 Oct 16:10
For settings changes, only what changed is recorded; values such as passwords and keys never enter the log.
Activity log
Who changed what and when, always on record
Sign-ins, user and role changes, settings changes, payment and marketplace settings, exports: all of it is recorded with who did it and when. Records cannot be deleted.
- Sign-in and lockout records
- User, role and permission changes
- Settings changes, without recording the values
- Exports containing personal data require extra authorization and are logged
Panel security
Your panel stays secure, permissions stay limited
Security rules apply when granting permissions too: no one can give someone else a permission they do not have themselves.
Two-factor authentication
An authenticator app and 8 recovery codes.
Strong passwords
In the panel, at least 12 characters with letters and numbers; for customers, at least 8 characters.
Sign-in security
Failed sign-in attempts are limited; changing a password signs out any other open sessions.
Permission ceiling
Apart from a super admin, no one can grant a permission they do not have or touch an account with more rights than their own.
Lockout protection
Deactivating yourself, downgrading your own role and removing the last super admin are all blocked.
Encrypted credentials
POS, marketplace and AI connection details are stored encrypted.
Personal dataKVKK
Handle customer data by the rules
Customer requests to download their data or close their account are handled from the panel, while records that must be kept by law are preserved.
Account closure
Anonymization cannot be undone; orders and invoices stay on file in anonymized form for legal retention.
Cookie consent
Cookies are split into essential, analytics and marketing; analytics tools only run if the visitor allows them.
Retention periods
Old system records and temporary data are deleted automatically once the period you set has passed.
Frequently asked questions4 questions
Frequently asked questions about team and permissions
Can an employee see only the orders?
Yes. Create a role with permission for the orders module only and assign it to your employee. Screens you grant view permission for open as read-only.
How do I remove access for an employee who has left?
Deactivate the user, and they can no longer sign in to the panel.
Can I see who changed what?
Yes. The activity log records sign-ins, user and role changes, settings changes and exports, along with who did it and when. Records cannot be deleted.
What if a customer asks for their data to be deleted?
The customer downloads their data and closes their account themselves, or you anonymize it from the panel. Orders and invoices stay on file in anonymized form for legal retention.
Related features
All features
Works hand in hand with these features
Live demodemo.roifex.com
Let's plan your team's permissions together
Let's talk about who needs access to what, and see the roles and the activity log in the demo.