Team & Security

Krafte provides comprehensive team management with role-based access control, secure invitations, two-factor authentication, and detailed activity logging. These features help you maintain security and accountability across your organization.

User Management

The Users page lets administrators view and manage all team members. You can change roles, update passwords, and transfer company ownership.

  1. Navigate to Users in the sidebar menu (visible to Admin and Owner roles).
  2. The page shows all active users with their name, email, role, and last activity date.
  3. To change a user's role, click the role dropdown next to their name and select the new role. The change takes effect immediately.
  4. To change a user's password (as an admin), click the options menu (three dots) next to the user and select Change Password. Enter the new password and confirm.
  5. To transfer ownership (Owner only), click the options menu next to the user you want to transfer ownership to, and select Transfer Ownership. This makes the selected user the new Owner and changes your role to Admin. This action requires confirmation.
  6. You cannot delete your own account or the Owner account. Contact support if you need to delete an Owner account.

Role Descriptions

Krafte uses role-based access control with six predefined roles. Each role has specific permissions that determine what the user can see and do in the platform.

  1. Owner — full access to every feature, including company settings, user management, and the ability to transfer ownership to another user. There is exactly one Owner per company.
  2. Admin — full access to all features including settings and user management. The only difference from Owner is that Admins cannot transfer ownership.
  3. Manager — access to sales-related features: Clients, Orders, Shipments, and the Dashboard. Managers can view products and materials but cannot modify inventory directly.
  4. Production — access to production-related features: Production Batches, Production Orders, Production Planning, and the ability to view materials and products. Cannot manage clients or orders.
  5. Warehouse — access to inventory management: Materials, Products, Semi-Finished Products, stock transactions, and Supplier Deliveries. Cannot manage clients, orders, or production.
  6. Accountant — access to financial and reporting features: Analytics, Financial Reports, cost data, and read-only access to materials and products for reference. Cannot modify inventory or manage production.

Inviting Users

Invitations let you add new team members to your Krafte company. The invitation is sent via email and expires after 7 days if not accepted.

  1. Navigate to the Users page.
  2. Click the Invite button in the top-right corner.
  3. Enter the email address of the person you want to invite.
  4. Select the role you want to assign from the dropdown (Admin, Manager, Production, Warehouse, or Accountant).
  5. Click Send Invitation. An email is sent to the invitee with a link to create their account.
  6. The invitation appears in the Pending Invitations section on the Users page.
  7. If the invitation was sent in error, click the Cancel button next to the pending invitation to revoke it.
  8. Invitations expire after 7 days. If the invitee has not accepted, you can resend the invitation.
  9. Once the invitee clicks the link and creates their account, they are automatically added to your company with the assigned role and removed from the pending list.

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security to your account. When enabled, you must enter a code from an authenticator app in addition to your password when logging in.

  1. Navigate to Settings and find the Two-Factor Authentication card.
  2. Click Enable 2FA to start the setup process.
  3. A QR code is displayed on screen. Open your authenticator app (Google Authenticator, Authy, 1Password, or similar) and scan the QR code.
  4. The authenticator app will start generating 6-digit codes that change every 30 seconds.
  5. Enter the current 6-digit verification code from your authenticator app into the confirmation field.
  6. Click Verify to activate 2FA on your account.
  7. The system will display backup codes — write these down or save them in a secure place. You can use a backup code to log in if you lose access to your authenticator app.
  8. When logging in, after entering your email and password, you will be prompted to enter the 6-digit code from your authenticator app.
  9. You can trust a device for 30 days — on trusted devices, 2FA will not be required for the trust period.
  10. To disable 2FA, return to Settings and click Disable 2FA. You will need to enter a verification code to confirm.

Activity Log

The Activity Log (History page) records every significant action taken on the platform. It provides an audit trail for accountability, troubleshooting, and compliance.

  1. Navigate to History in the sidebar menu.
  2. The activity log displays a chronological list of all actions, with the most recent first.
  3. Each log entry shows: Entity Type (Material, Product, Order, etc.), Entity Name (the specific item), Action (Created, Updated, Deleted, Stock Changed, Status Changed, etc.), Change Details (what was modified), Timestamp, and User (who performed the action).
  4. Use the tab filters to focus on specific activity types: All (everything), Warehouse (stock changes, transfers, deliveries), Production (batches, orders, planning), Sales (orders, shipments, clients), System (settings changes, user management).
  5. Use the date filter to narrow the log to a specific time period.
  6. Use the user filter to see only actions performed by a specific team member.
  7. Click on any log entry to see the full change details — for updates, this shows the before and after values of each changed field.
  8. The activity log is read-only — entries cannot be modified or deleted, ensuring a reliable audit trail.

All Documentation