Operators
User Management
The "Users" tab in the cairo.BI system allows for full management of users with access to the system – from adding new accounts to assigning roles, access levels, and permissions. It serves as a central administrative hub, allowing you to control who can access specific reporting data and to what extent.
Users List
The "User Management" view presents a list of system users along with their permissions and security status. The following information is provided for each user:
-
User – The name, surname, and email address assigned to the account.
-
Role – The level of permissions in the system (e.g., Superuser, User).
-
2FA – The status of two-factor authentication (Active or Inactive).
-
Profit Preview – An indicator (checkmark) showing if the user is authorized to view margins and financial data.
-
Sources – The systems from which the data originates (e.g., ERP).
-
Created – The date the account was registered in the system.
-
Updated – The date of the last modification to the user's data.
-
Actions – A set of tools for managing a specific record: delete (trash icon), preview (eye icon), and edit.
User Card
User Card (Details & Permissions)
The "User Card" is a detailed view that allows for full profile editing, account security management, and precise definition of data visibility. The card is divided into an information section and a permissions panel:
Profile Details
Located on the left side of the screen, this section displays basic user information:
-
Initials and Name – A graphical visualization along with the user's full name and assigned role.
-
Email – The address used for logging in and system communication.
-
Profit Preview – A toggle/indicator for margin visibility.
-
2FA – Current two-factor authentication status.
-
Created / Updated – Registration and last activity dates.
Permission Management
The main table allows you to assign access to specific modules and warehouses:
-
Source – The data source system (e.g., ERP).
-
All Warehouses – A collective checkbox granting access to the entire warehouse structure.
-
Selected Warehouses – A function allowing for the selective choice of specific warehouses (e.g., 03, CE, 02) via a dropdown list.
-
Tab Access (Warehouse, Settlements, Sales, Purchases) – Specific checkboxes that determine if a user has access to the corresponding sections (tabs) in the main system menu.
-
Select All – A button to quickly select all available permissions for a given source.
Additional Actions Menu
Available under the "three dots" icon, these buttons allow for advanced account administration:
-
Reset Password – Forces the user to change their password.
-
Disable / Reset 2FA – Manages the additional layer of account security.
-
Logout from all devices / Forget 2FA – Immediately terminates all active sessions and trusted device settings for the user.
-
Delete – Completely removes the user card from the system.
Adding a new user
Roles and Permissions
Roles define which sections of the system a user can access:
-
ROLE_MAGAZYN – access to warehouse reports and analytics,
-
ROLE_ROZRACHUNKI – access to receivables, liabilities, and balance reports,
-
ROLE_SPRZEDAZ – access to sales analytics and reports,
-
ROLE_ZAKUPY – access to purchasing reports,
-
ROLE_ZYSK – access to profit and margin data.
If an operator does not have the ROLE_ZYSK permission, all columns and charts related to profit and % profit will be hidden or displayed as 0.
When this role is enabled, the user gains full visibility into profitability and margin data.
Data Sources
Each operator can have access to different data sources – e.g., ERP systems, B2B modules, and, in the future, other integrated environments.
Administrators can assign one or multiple sources to a user, precisely controlling which data is available to them.
Warehouse Access
When assigning roles and sources, it is also possible to define access to specific warehouses.
Administrators can:
-
grant access to all warehouses, or
-
select specific locations (e.g., [CE] Central, [03] Warehouse 03, [02] Warehouse 02).
This ensures each user sees only the data relevant to their scope of work.
Superuser
A Superuser has full access to all system data and functionalities.
They can:
-
add, delete, and edit operators,
-
assign roles, sources, and warehouse access,
-
manage permissions,
-
configure system settings.
It is recommended to grant Superuser status only to trusted system administrators.
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) enhances login security.
Once enabled, the user must provide a one-time code from an authentication app in addition to their password.
-
2FA can be activated or reset only during operator editing.
-
When active, the operator profile displays the status “Enabled” and a “Show QR code” button.
-
After resetting or deactivation, the status changes to “Disabled”.
The “Operators” tab in cairo.BI provides full control over user accounts, roles, access levels, and authentication security — ensuring efficient and safe management of your analytics environment.


