The Manage Users & Roles tab shows a two-panel layout. On the left is a search field where you can type a name or email address to find a user. Results appear as you type, showing up to 20 users at a time with pagination if there are more.

Click on any person in the search results to select them. Their current roles and account information will load in the right panel. You can then view and update their access from there.

To add a new user, open the Create / Link User tab. Fill in the following fields:

• First Name and Last Name — The user's display name within the system.
• Email — Required. This becomes the user's login. If an account with this email already exists in NazTrack, the existing account will be linked to your church rather than creating a duplicate.
• Roles — Select which roles this user should have. The base church user role is always assigned automatically.
• Send Welcome Email — Checked by default. When checked, the system sends the user an email with their temporary password and a link to log in. Uncheck this if you plan to inform the user separately.
• Link to Person — Optional. If this user is also in your church's People database, you can link their user account to their person record here.

New users are given a temporary 5-character password and will be prompted to change it on first login. If the email address already exists in the system, the user is simply granted access to your church — no duplicate account is created.

After selecting a user in the left panel, the right panel shows their current roles as checkboxes. The base church user role is always checked and cannot be removed. All other roles can be toggled on or off.

Check the roles you want this user to have, then click Save Roles. The change takes effect immediately — the user's access is updated without requiring them to log out and back in.

Select the user in the left panel, then click Reset Password in the right panel. A confirmation dialog will appear. You can optionally check 'Resend Welcome Email' to have the system email the user their new temporary password automatically.

The reset generates a new 5-character temporary password. The user will be required to change it the next time they log in.

To remove a user's access to your church entirely, select them and click Revoke All Roles. This removes all of their church-level roles, preventing them from accessing church data. Their user account is not deleted — they may still have access to other churches or districts if applicable.

A confirmation dialog will remind you that only this church's roles are being revoked. Confirm to proceed.

The Permissions tab shows all roles defined for your church. Each role is listed with its name, type, and number of assigned permissions.

• System roles — Built-in roles provided by NazTrack. Their permissions cannot be changed. Click View to see what a system role includes.
• Custom roles — Roles you created. Click Edit to add or remove individual permissions from a custom role.

When editing a custom role's permissions, they are organized by category (for example, People, Giving, Events). Check or uncheck individual permissions to control exactly what users with that role can see and do. Click Save to apply the changes — users assigned this role will see the updated access immediately.

In the Permissions tab, click Create Role. Enter a name and optional description, then click Create Role to save it. The new role starts with no permissions. Open it with Edit and add the permissions appropriate for that role.

Once the role is configured, you can assign it to users from the Manage Users & Roles tab.