User Accounts and Authorization

In the Chexta system, each staff member must log in with their own user account. With personal accounts, all operations performed are logged, authorization control is maintained and security is kept at the highest level. This guide explains the user creation and authorization process step by step.

Adding a New User

To add a new user, go to the Users section from the Settings module and click the Add New User button. Enter the first name, last name, email address and mobile phone number. The email address will also be used as the username. Create a temporary password or allow the system to generate an automatic password. The user must change this password on first login.

Role Assignment

Select the appropriate role for the user in the role assignment section. Chexta offers five basic roles:

• The Admin role provides full access to all modules and settings; critical operations such as system configuration, user management and data deletion are only available to this role.
• The Receptionist role can use the Front Office, Calendar and Room Status modules; can create reservations and perform check-in and check-out operations.
• The Accountant role accesses the Front Cashier, Accounting and Reports modules; manages invoicing, cashier operations and financial reports.
• The Housekeeping role only accesses the Room Status module; can update cleaning status, complete tasks and submit maintenance reports.
• The POS role uses the Restaurant POS module; manages table opening, check entry and kitchen orders.

Module-Based Access Control

With module-based access control, you can also define customized permissions beyond the standard roles. For example, you can give a receptionist view-only permission in the Reports module or grant an accountant read-only access in the Front Office module. For each module, select one of the options: no access, read-only or full access.

Password Policies

From the password policies section, configure the security rules that will apply to the entire system. Set parameters such as minimum password length, complexity requirements (uppercase, lowercase, numbers, special characters), password validity period and account lockout after failed login attempts. Two-factor authentication can be enabled; in this case, users must also enter a verification code sent to their email or phone when logging in.

Review user accounts regularly. Set the accounts of departing staff to inactive status and update the permissions of active users when their responsibilities change. From the Session History section, you can monitor each user's login times, IP addresses and operations performed.