HIBR Account & Settings

Users, roles, two-factor authentication, single sign-on, notification preferences, audit log, workspace settings. The operational reference for everything under Settings — the controls that govern who can do what inside your HIBR workspace.

Your account vs your workspace

HIBR has two layers:

• Your personal account — your login (email + password + 2FA), your profile, your notification preferences. One account per person. The same account can belong to multiple workspaces if you serve clients across several businesses (common for accountants and tax agents).
• The workspace — the actual ERP instance for a business: company profile, TRN, employees, customers, books. Each workspace has one Owner and any number of additional users. The workspace is what you pay for; your personal account is free.

User management

Settings → Users gives you the full roster, with status (active, invited, suspended), role, last-login timestamp, and the workspaces each user has access to.

Inviting a user

1. Settings → Users → Invite user.
2. Enter email + role. The user gets an email invite valid for 7 days. They set their own password and 2FA on first login.
3. Optional: scope. If you've created custom scopes (e.g., "Branch: Dubai only" or "Customers: Sales-team-owned only"), apply them at invite time.
4. Audit log captures the invitation. Every user-management action is logged for 7 years.

Removing or suspending a user

Suspending pauses access without deleting the user record — useful for staff on long leave or contractors between engagements. Removing fully revokes access and dissociates from all records. Either way, the user's historical actions remain in the audit log (immutable).

Default roles

HIBR ships with 8 default roles. Each role has a curated permission set that maps to typical SMB job functions. Permissions can be extended (Enterprise tier) but never below the safety floor — e.g., no role can disable the audit log or bypass approval workflows.

Custom roles (Enterprise)

Enterprise admins can compose roles from a granular permission tree: 200+ permissions across 14 modules. Examples seen in beta:

• "Branch Manager — Dubai" — Sales + Accountant + Warehouse permissions, scoped to a single branch location.
• "AP Clerk" — Can create supplier invoices and supplier payments up to 25,000; everything above routes for approval.
• "AR Specialist" — Customer invoices + collections + dispute management, but no journal-entry power.
• "Group Auditor" — Read-only across all workspaces under a parent company.

Custom roles inherit safety floors: no custom role can disable the audit log, bypass owner-required approvals, or modify the company TRN/Corporate Tax Reference.

Two-factor authentication (2FA)

2FA is available on all tiers. The Owner role has 2FA enforced by default. Admins can enforce 2FA workspace-wide on Pro and Enterprise.

Single sign-on (SSO)

SSO is included in Enterprise. It eliminates separate HIBR passwords and lets your IT team manage HIBR access through the same identity provider that controls Microsoft 365, Google Workspace, etc.

• Supported protocols: SAML 2.0 and OpenID Connect (OIDC).
• Tested identity providers: Microsoft Entra ID (Azure AD), Google Workspace, Okta, OneLogin, JumpCloud, Auth0.
• SCIM 2.0 provisioning: Automated user create/update/deactivate when employees join, change roles, or leave.
• JIT provisioning: First-time SSO login auto-creates the user with default role mapping you configure.
• Bypass for break-glass account: The Owner retains a password+2FA login outside SSO for emergency recovery.

Notification preferences

Settings → Notifications gives each user granular control over what HIBR sends them. 40+ notification types across 4 channels.

Each notification type has 4 controls: channel routing, severity threshold, frequency (immediate / daily / weekly), and quiet hours. Defaults are reasonable; tune them to your reality.

Audit log

Settings → Audit Log is the immutable record of every meaningful action in your workspace. It is retained for 7 years per FTA Federal Decree-Law 7/2017 (Tax Procedures Law) record-keeping requirements.

• Captures: invoice created/voided/modified, payment recorded, journal entry posted, user added/removed, permission changed, integration connected/disconnected, tax filing submitted, data exported, login (success + failed).
• Each entry includes: timestamp (UTC + UAE time), user, IP address, user-agent, the before/after diff of the changed record.
• Filters: by user, module, date range, action type, severity, IP address.
• Export: CSV or JSON. The full export is also pre-formatted for auditor review (PWC, EY, KPMG, Deloitte, BDO templates).
• Tamper-proof: append-only. No role — not even Owner — can edit or delete audit entries. Underlying storage uses content-addressed hashes.

Workspace + company profile

Settings → Company controls the legal-entity profile that appears on every invoice, tax filing, and report.

• Company name — English + Arabic. The Arabic name is rendered correctly on Arabic invoices and FTA submissions.
• TRN (Tax Registration Number). Validated against the FTA public registry on entry.
• Corporate Tax Reference Number. Validated against FTA records.
• Trade License + expiry. HIBR alerts you at D-90 / D-60 / D-30 before renewal. See the Trade License Renewal cornerstone blog.
• Free Zone status + QFZP claim. If applicable per Cabinet Decision 100/2023, HIBR routes your Corporate Tax computation through the QFZP rules.
• VAT period. Auto-detected (monthly or quarterly); editable if FTA changes your assignment.
• Logo + brand colors. Applied to invoices, quotes, statements, and customer-portal pages.
• Banking details. Default bank + IBAN that appears on invoices. Multiple bank accounts supported per workspace.

Multi-entity & multi-branch

If you run multiple legal entities or multiple branches under one entity, HIBR supports both shapes:

• Multiple legal entities — each entity is its own workspace. Consolidated reporting available on Enterprise. Common for groups with separate TRNs (e.g., trading + services).
• Multiple branches under one entity — single workspace, multiple branches. Branch-level P&L, branch-level inventory, branch-level POS. Common for retail chains and F&B operators.

Billing & subscription settings

Settings → Billing is Owner-only. The page shows your current plan, next renewal date, payment method, and the full invoice history.

• Change plan. Upgrade (Lite → Pro → Enterprise) takes effect immediately with prorated charges. Downgrade takes effect at next renewal with appropriate feature-gate warnings.
• Update payment method. Card, direct debit (UAE banks), or invoice (Enterprise). Cards are tokenized via Stripe; HIBR never stores raw card data.
• Add seats. Pro tier: 50/user/month additional. Enterprise: contact your account manager.
• Cancel subscription. Self-serve. Cancellation is honored at the end of the current billing period; you keep full access until then.
• Billing contact. A non-Owner can be set as billing recipient (invoices go there); Owner still authorizes plan changes.

For the full billing reference, see the Billing & Subscriptions help article.

Data export & account closure

Your data is yours. PDPL Federal Decree-Law 45/2021 Articles 12 & 13 (right to access + right to erasure) are honored without bureaucratic friction.

1. Export anytime. Settings → Data Export. Choose format (CSV / JSON / SQL dump / PDF financial pack). Full export including audit log usually completes in under 30 minutes.
2. Cancel subscription. Triggers a 90-day read-only retention window. Export at your pace.
3. Day 91: permanent deletion. Unless an Enterprise data-handover SOP is in progress, all workspace data is permanently deleted from primary storage and replicas on day 91. Backups age out on the standard 35-day retention cycle.
4. Immediate erasure. Owner can request immediate erasure ahead of day 91 in writing. HIBR honors PDPL Article 13 within 30 days regardless of subscription state.

Related help articles

• Getting started: Getting Started help
• Billing reference: Billing & Subscriptions help
• Integrations setup: Integrations help
• AI features: AI Features help
• Data protection: Data Residency, Security Audit
• Developer reference: Developer portal