How to set group permissions and assign a group to a user in KSeFGPT

In the account switcher, select the company in which you want to set group permissions. Then select Organization in the main navigation.

If you manage several companies, check the selected organization name before changing any groups. Groups and members belong to a specific organization.

Select Groups in the top navigation of Organization. You will see the groups, their member counts, assigned permissions, and the Edit and New group buttons.

The system group named Zarząd has full access and cannot be deleted. For an employee, accounting team, or external accounting office, it is usually safer to create a separate group with narrower permissions.

To configure an existing group, select Edit in its row. To create a new one, select New group, enter its name, and choose a color that makes it easier to identify in the user list.

Under Group permissions, select the permitted operations. You can search by permission identifier or its description. Each permission is selected independently.

Check the group name and selected permissions. For an existing group, select Save. For a new group, select Create group.

After a successful save, Group changes saved or Group created appears. The Groups list will display the current permission identifiers.

If the edited group already has members, the new permissions take effect for them immediately. Before removing an important permission, check the member count displayed next to the group name.

Select Settings in the top navigation of Organization. On the Users card, find the email address of the active member whose access you want to change.

Group editing is disabled for the owner and for a person with the Invited status. You can select groups when inviting a user; further changes become available after they accept the invitation.

In the Groups column, select add next to the correct user. Select the prepared group from the list. The assignment is saved immediately—there is no separate Save button.

After it is added, the group name appears next to the user's email address. The list under add contains only groups that this person has not yet joined.

To remove this group's permissions from the user later, select × next to its name. Remember that the same permissions may still be granted by another group assigned to the user.

Select Activity in the top navigation of Organization. The log shows recorded operations for the selected company: the user's email address, the action, and the date and time it occurred. An unsuccessful or blocked operation is additionally marked as rejected.

After completing this instruction, the list should include updated a group and added a user to a group. This lets you check who changed the organization member's access and when.

The organization owner can access the log automatically. Another member can open Activity only if at least one of their groups includes activities:read.