> For the complete documentation index, see [llms.txt](https://docs.one-cp.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.one-cp.com/configuration-and-setup/users.md).

# Users & Permissions

Permission Control System Documentation

## Overview

The permission control system ensures secure and organized access to resources (such as Auth Configs, Business Units, Companies, Configs, Groups, Payment Methods, Permissions, Profile Providers, Report Configs, Transactions, User Profiles, and Widgets). It allows roles (Read, Write, Admin) to be assigned to individual users or groups, controlling how resources are accessed and managed over a certain Business Unit.

*Note: Permission system architecture diagram will be added here.*

Permissions are structured to allow either direct assignment to users or through group memberships. This ensures that access control is scalable and easily managed.

## Creating and Managing Groups

### Creating a New Group

1. Navigate to **Organization > Users & Permissions > Grouping Tab**.
2. Click on **Create New Group**.
3. Provide a group name and select the relevant business unit.
4. Use filters to select users for the group.
5. Click **Save** to finalize the group.

*Note: Group creation interface screenshot will be added here.*

### Managing Group Details

You can edit existing groups by:

* Renaming the group.
* Modifying filters to update the group's members.

### Group Inheritance of Permissions

All its members inherit permissions assigned to a group, simplifying access management for large teams.

> **Note:** A user can be a member of more than one group, inheriting the permissions from each group they are part of.

## Assigning Permissions

### Assigning Permissions to Groups or Individual Users

Navigate to **Organization > Users & Permissions > Permissions** Tab.

### 1. Creating a New Permission:

* Provide a unique name for the permission and select the relevant Business Unit.
* Choose the user or group to whom this permission will apply.
* Define the access level (Read, Write, Admin, or No Role) for each resource within the selected Business Unit.
* Click **Create** to complete the permission setup.

*Note: Permission creation interface screenshot will be added here.*

### 2. Editing an Existing Permission:

* Select the permission you wish to edit, then click **Edit**.
* Modify Name, Business Unit, Access Name ( User, Group ), or access levels as needed.
* Click **Save** to implement the updates.

**Expanding Permissions Details**

A detailed view will expand beneath the row when you click on a group or user entry in the table. This view shows the permissions granted for each resource:

* Green circles with a checkmark (✔️) indicate granted permissions write or admin.
* Red circles with a cross (❌) indicate permissions that are not granted.
* Orange circles with a checkmark **(✔️)** indicate granted permissions read-only.

*Note: Permission details view screenshot will be added here.*

### Best Practices

* Regularly audit group memberships and user roles to maintain accurate access control.
* Use groups to standardize permissions for teams or departments.
* Limit the Admin role to trusted personnel who require full access.

***