Sign up

User Management & Security

HomeUser Management & Security -   User Management & Security

User Management & Security lets you control who has access to your Afri Invoice account by assigning roles, setting permissions, and limiting what each team member can see or do. It protects your business with secure authentication, activity tracking, and strict access controls that always keep your financial data safe.

Role-Based Access Control

Four built-in roles cover the team structure of most growing businesses. Assign the right role to each user and let the platform enforce the boundaries.

Role Permissions
Primary Full access
Full platform control: billing, user management, all business settings, account deletion. Reserved for the account owner.
Admin High access
Create and manage invoices, customers, and products. Access most platform settings. Cannot manage billing or delete the account.
Accountant Finance only
Read and edit financial data, generate reports, reconcile accounts. Cannot create or delete invoices.
Assistant Operational
Day-to-day tasks: create invoices, update customer records. Restricted to operational functions only.

Security Features

Password management strong password requirements with secure change and reset functionality.
User invitations invite team members by email and assign their role before they accept. They cannot access the account until the invitation is accepted.
Activity tracking know who is active, their assigned role, and which business profiles they can access.
End-to-end encryption all data is encrypted in transit using TLS 1.2 and 1.3, and at rest using AES-256.
User management and settings

Certifications and Compliance

ISO/IEC 27001:2022 Certified Afri Invoice holds independent certification for its information security management system, the gold standard for data security in enterprise software.
Nigeria Data Protection Act 2023 Compliant full adherence to Nigeria's primary data protection legislation, governing how your business and customer data is collected, stored, and processed.
NRS Access Point Provider accredited under the Nigerian Revenue Service Mandatory Billing System to transmit e-invoices on behalf of Nigerian businesses.

Frequently Asked Questions

Can I remove a team member's access immediately?

Yes. The Primary account holder can revoke any user's access instantly from the user management settings. Revoked users lose access immediately and cannot recover it without a new invitation.

Is my financial data visible to Afri Invoice staff?

Staff access to customer data is governed by strict internal access control policies aligned with ISO/IEC 27001:2022. Access is restricted to authorised personnel only and every access event is logged for audit purposes.

What happens to user access if I downgrade my plan?

If a plan downgrade reduces the maximum number of users, you will be prompted to deactivate excess user accounts before the downgrade is processed.

Manage Your Team Securely — Start Free Trial

No credit card required. Set up in under 3 minutes.

Chat Now