# Users

> The Kullanıcılar (Users) screen — account list, filters, badges, the Actions menu and the New User, Edit User, Extra Permissions, Organizational Restriction and Password windows.

URL: https://erpdocs.corexlogic.com/en/yonetim/ekranlar/kullanicilar

- **Type:** Screen
- **Module:** Administration
- **Menu path:** Yönetim › Kullanıcı ve Roller › Kullanıcılar (Administration › Users and Roles › Users)
- **Screen route:** `/users`
- **Required permission:** `users.view`

The list of accounts that sign in to CoreX ERP. Creating accounts, assigning roles, defining person-specific permissions
and restrictions, password and lock tasks, and closing accounts are all done from this screen.

![Users list](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/kullanicilar.png)
1. New User — opens an account by invitation or password
2. Search by name or e-mail
3. Role filter
4. Status: Active · Inactive (disabled) · Locked · All
5. Row: name, roles and account (e-mail)
6. Actions — edit, permissions, password, disable

## List

| Column | Content |
|---|---|
| **Ad** (Name) | Full name. If no name was entered, "Ad girilmemiş" (No name entered). The status badge is shown next to it (see below). |
| **Roller** (Roles) | The roles assigned directly to the user. If there is an organizational restriction, a summary such as "Kısıtlı: 2 depo · 1 iş merkezi" (Restricted: 2 warehouses · 1 work center) appears below. Roles that come from the unit are not shown here. |
| **Hesap** (Account) | Email — the sign-in ID. |
| **İşlem** (Action) | The **İşlemler** (Actions) menu. |

| Filter | Behavior |
|---|---|
| **Ara** (Search) | Text contained in the name or email ("Ad ya da e-posta ara…" — Search name or email…). |
| **Rol** (Role) | A single role; searchable list. |
| **Durum** (Status) | **Aktif** (Active; default) · **Pasif (devre dışı)** (Inactive (disabled)) · **Kilitli** (Locked) · **Tümü** (All). In the address: `?durum=devre-disi`, `?durum=kilitli`, `?durum=tumu`. |

| Badge | Meaning |
|---|---|
| **Devre dışı** (Disabled; red) | The account has been closed; it cannot sign in. The record has not been deleted. |
| **Kilitli** (Locked; yellow) | Locked after repeated failed password attempts; unlocks automatically when the period expires. |
| **Davet bekliyor** (Invitation pending) | The invitation link has not been used yet; the account cannot sign in. |

The **Dışa Aktar** (Export) and **İçe Aktar** (Import) buttons appear only with the `users.import` permission;
**İçe Aktar** additionally requires `users.create`, `users.edit`, `users.delete`, `roles.create` and `roles.edit`. The
file is not shared because it contains password hashes.

## Actions menu

![User row Actions menu](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/kullanici-islemler.png)
1. Name, phone, roles and org unit
2. Personal permissions on top of roles
3. Narrows rights to warehouses and work centers
4. Reset link or manual password
5. Disables the account — record is kept

| Item | When it appears | Permission | Page |
|---|---|---|---|
| **Kullanıcıyı Düzenle** (Edit User) | On an active account | `users.edit` | [Assign a role to a user](https://erpdocs.corexlogic.com/en/yonetim/islemler/kullaniciya-rol-atama) |
| **Ekstra Yetkiler** (Extra Permissions) | On an active account | `users.edit` | [Grant extra permissions](https://erpdocs.corexlogic.com/en/yonetim/islemler/ekstra-yetki-verme) |
| **Organizasyon Kısıtlaması** (Organizational Restriction) | On an active account | `users.edit` | [Assign an organizational restriction](https://erpdocs.corexlogic.com/en/yonetim/islemler/organizasyon-kisitlamasi-verme) |
| **Şifre** (Password) | On an active account | `users.edit` | [Reset a password](https://erpdocs.corexlogic.com/en/yonetim/islemler/sifre-sifirlama) |
| **Daveti Yeniden Gönder** (Resend Invitation) | On an account with a pending invitation | `users.create` | [Invite a user](https://erpdocs.corexlogic.com/en/yonetim/islemler/kullanici-davet-etme) |
| **Kilidi Kaldır** (Unlock) | Only on a locked account | `users.edit` | [Unlock an account](https://erpdocs.corexlogic.com/en/yonetim/islemler/kilit-kaldirma) |
| **Devre Dışı Bırak** (Disable) | On an active account | `users.delete` | [Disable a user](https://erpdocs.corexlogic.com/en/yonetim/islemler/kullaniciyi-devre-disi-birakma) |
| **Geri Yükle** (Restore) | On a disabled account | `users.delete` | same page |

A disabled account has no editing items; a user without the `users.delete` permission sees "Devre dışı hesapta işlem
yok" (No actions on a disabled account) there.

## New User window

![New User — User Information](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/yeni-kullanici.png)
1. Tabs — information, roles, org unit
2. E-mail — login ID, cannot be changed later
3. Invitation — single-use link valid for 3 days (recommended)
4. Administrator sets the password — account opens at once
5. Lock on failed attempts
6. Send Invitation — needs e-mail settings

The window's description: "Hesap davetle ya da sizin belirlediğiniz şifreyle açılır. Etkili izinler seçilen
rollerin ve birimin rollerinin birleşimidir." (The account is created with an invitation or with a password you set.
The effective permissions are the union of the selected roles and the unit's roles.)

| Tab | Field | Rule |
|---|---|---|
| **Kullanıcı Bilgileri** (User Information) › Kimlik (Identity) | **Ad** (First Name), **Soyad** (Last Name) | Required. |
| | **E-posta** (Email) | Required. "Giriş kimliği olur; sonradan değiştirilemez." (Becomes the sign-in ID; cannot be changed later.) |
| | **Telefon** (Phone) | Optional; digits, spaces, `+`, `( )` and `-`; 7–15 digits. |
| **Kullanıcı Bilgileri** › Giriş ve Şifre (Sign-in and Password) | **Davet e-postası gönder — kullanıcı şifresini kendisi belirlesin** (Send an invitation email — let the user set their own password) | Default. A single-use link valid for 3 days; the account cannot sign in until the link is used. Requires email settings. |
| | **Şifreyi ben belirleyeyim** (I will set the password) | The account is created immediately. **Şifre** (Password), **Şifre (tekrar)** (Password (again)), **Rastgele Üret** (Generate Random), **Kopyala** (Copy), **İlk girişte şifre değiştirilmesi zorunlu olsun** (Require password change at first sign-in), **Hesabın açıldığını kullanıcıya e-postayla bildir** (Notify the user by email that the account has been created). The password is not included in any email. |
| **Kullanıcı Bilgileri** › Güvenlik (Security) | **Hatalı şifre denemelerinde hesabı kilitle** (Lock the account on failed password attempts) | On by default. If off, attempts are unlimited. |
| **Roller** (Roles) | Role list (grouped by area, searchable) | Multiple roles can be selected. For conflicting roles, a **Görevler ayrılığı uyarısı** (Segregation of duties warning). |
| **Organizasyon Birimi** (Organizational Unit) | Unit tree | Visible only with `organization.view`; assigning requires `organization.edit`. |

![New User — administrator sets the password](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/yeni-kullanici-sifre.png)
1. Password — 8+ characters, a digit, a lowercase letter
2. Generate and Copy
3. Change password at first login
4. Notice e-mail — password is not included
5. Create

Depending on the selected method, the confirm button is **Davet Gönder** (Send Invitation) or **Oluştur** (Create).

## Edit User window

![Edit User](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/kullanici-duzenle.png)
1. Roles — add or remove roles
2. Account and login lock status
3. Save — disabled when nothing changed

The same three tabs. The email is read-only ("Giriş kimliğidir, buradan değiştirilemez. Ad boşsa listede
e-posta gösterilir." — It is the sign-in ID and cannot be changed here. If the name is empty, the email is shown in the
list.). The **Durum** (Status) group shows **Hesap** (Account; Etkin (Active) / Devre dışı (Disabled)) and **Giriş
kilidi** (Sign-in lock; if locked, the end time and the number of failed attempts). **Kaydet** (Save) is disabled if
there are no changes.

## Extra Permissions window

![Extra Permissions — personal grants](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/ekstra-yetkiler.png)
1. All screens in menu — grants nothing
2. Search permissions
3. Locked — from a role, cannot be removed here
4. Grant a permission the role lacks
5. Reduce extra grants to read-only

"Rolün üstüne kişiye özel izin verin. Kilitli izinler kullanıcının rollerinden gelir; kaldırmak için
rolü düzenleyin." (Grant person-specific permissions on top of the role. Locked permissions come from the user's roles;
to remove them, edit the role.) The permission tree is the same as in the role window (**Modül › Sayfa › İşlem** —
Module › Page › Action). Locked rows come from roles. **Bütün ekranları göster** (Show all screens) opens all permitted
screens in the person's menu ("rolünün ekran kataloğundan bağımsız; yetki vermez" — independent of the role's screen
catalog; does not grant permissions). **Ek İzinleri Salt Okunur Yap** (Make Additional Permissions Read-Only) reduces
only the directly granted additional permissions to view permissions.

## Organizational Restriction window

![Organization Restriction — warehouses and work centers](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/organizasyon-kisitlamasi.png)
1. Warehouses and Work Centers tabs
2. No selection = no restriction; selection narrows rights
3. Tick the allowed warehouses
4. Clears the selection of this type

"Kısıtlama yetki vermez, daraltır: rolün izin verdiği işi seçilen depo ve iş merkezlerine sınırlar.
Seçim yoksa o türde kısıt yok." (A restriction does not grant permissions, it narrows them: it limits the work the role
permits to the selected warehouses and work centers. If nothing is selected, there is no restriction for that type.)
Two tabs: **Depolar** (Warehouses) and **İş Merkezleri** (Work Centers); the tab name shows the number selected.
**Bu Türdeki Kısıtı Kaldır** (Remove the Restriction for This Type) clears the selection on the open tab. An inactive
warehouse or work center remains in the list with a "pasif" (inactive) note.

## Password window

![Password — link or manual](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/sifre.png)
1. Reset link valid for 30 minutes
2. Manual password — you hand it over
3. Must change at first login
4. Save — sets the manual password

Two methods in the same window: **Sıfırlama bağlantısı gönder** (Send reset link; valid for 30 minutes, the user sets
the password) and **Yeni Şifre (elle belirle)** (New Password (set manually); at least 8 characters; **İlk girişte şifre
değiştirilmesi zorunlu olsun** (Require password change at first sign-in) checked by default).

## Confirmation windows

![Disable the account?](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/devre-disi-onay.png)
1. Login closes, open session ends; roles are kept

| Window | Text |
|---|---|
| Hesap devre dışı bırakılsın mı? (Disable the account?) | "… giriş yapamaz olacak ve açık oturumu kapanacak. Kayıt SİLİNMİYOR: rolleri olduğu gibi duruyor, geçmiş belgeler hesabı göstermeye devam ediyor ve dilediğiniz zaman geri yükleyebilirsiniz." (… will not be able to sign in and their open session will be closed. The record is NOT DELETED: its roles remain as they are, past documents continue to show the account and you can restore it at any time.) |
| Hesap geri yüklensin mi? (Restore the account?) | "… yeniden giriş yapabilecek. Kapatıldığı günkü rolleri ve yetkileri olduğu gibi geri gelir — yeniden atamanız gerekmez. Parolası değişmedi." (… will be able to sign in again. The roles and permissions it had on the day it was closed come back as they were — you do not need to reassign them. Its password has not changed.) |
| Kilit kaldırılsın mı? (Remove the lock?) | "… art arda başarısız giriş denemesi nedeniyle kilitlendi ve süresi dolunca kilit kendiliğinden çözülecek. Kaldırırsanız hesap HEMEN giriş yapabilir. Şifre DEĞİŞMEZ: …" (… was locked because of repeated failed sign-in attempts, and the lock will clear by itself when it expires. If you remove it, the account can sign in IMMEDIATELY. The password does NOT CHANGE: …) |
| Davet yeniden gönderilsin mi? (Resend the invitation?) | "… adresine 3 gün geçerli, tek kullanımlık yeni bir bağlantı gider. Daha önce gönderilen bağlantı artık çalışmaz." (A new single-use link valid for 3 days is sent to …. The previously sent link no longer works.) |

![Disabled accounts and Restore](https://erpdocs.corexlogic.com/en/en/img/screens/yonetim/kullanicilar-pasif.png)
1. Status: Inactive (disabled)
2. Disabled badge
3. Restore — reopens with its roles

## Server rejection messages

| Situation | Message |
|---|---|
| No email settings, invitation selected | "E-posta gönderimi yapılandırılmamış (Yönetim › Özelleştirme › Genel › E-posta Ayarları). Davet bağlantısı gönderilemez; hesabı şifre belirleyerek açabilirsiniz." (Email sending is not configured (Administration › Customization › General › Email Settings). The invitation link cannot be sent; you can create the account by setting a password.) |
| Disabling your own account | "Kendi hesabınızı devre dışı bırakamazsınız. Bunu başka bir yönetici yapmalı." (You cannot disable your own account. Another administrator must do this.) |
| Removing the role from the last Administrator | "… Yönetici rolünü taşıyan son etkin hesap. Rolü kaldırmadan önce başka bir kullanıcıya Yönetici rolü verin." (… is the last active account holding the Administrator role. Give another user the Administrator role before removing the role.) |
| Resending an accepted invitation | "Bu hesabın daveti kabul edilmiş; şifre için sıfırlama bağlantısı gönderin." (This account's invitation has been accepted; send a reset link for the password.) |
| Unlocking an account that is not locked | "Bu hesap kilitli değil." (This account is not locked.) |
| License user limit | "Lisans en çok … etkin kullanıcıya izin veriyor; şu an … etkin kullanıcı var. Kullanılmayan bir hesabı kapatın ya da lisansı genişletin." (The license allows at most … active users; there are currently … active users. Close an unused account or extend the license.) |
| Window validation | "Ad zorunlu." (First name is required.) · "Soyad zorunlu." (Last name is required.) · "E-posta zorunlu." (Email is required.) · "Geçerli bir e-posta adresi yazın." (Enter a valid email address.) · "Şifreler aynı değil." (The passwords do not match.) · "Kullanıcı bilgilerinde düzeltilmesi gereken alanlar var." (There are fields in the user information that need to be corrected.) |