Step-by-step guideAdmin guide

Staff, permissions and system logs

Invite co-operators into the admin area, grant fine-grained permissions through roles, and look up the platform's error, admin activity, security, queue and webhook logs.

LDPage Team·8 min read

How do staff and roles work?#

The admin area has two kinds of accounts. The owner has full access and is the only one who manages Staff and Roles. Staff only see the areas their role allows; permissions are split by area (Customers, Orders, Support, Settings…) and action (View, Edit, Other actions). On the customer side, staff use the app like any customer, subject to the limits of the plan assigned to them.

Only the owner sees Staff (Nhân viên) in the System menu. The Logs page requires the Logs › View permission. Every role change, lock or removal takes effect immediately because that person's existing sessions are revoked.

1. Invite staff#

1
Open Admin › Staff (Nhân viên). The Staff tab lists admin accounts with the Account, Role, Plan and Last sign-in columns.
2
Click Invite staff (Mời nhân viên) at the top right. Enter the Email, an optional Name, and pick a Role from the roles you created, or Owner (full access) — Chủ sở hữu (toàn quyền).
3
Choosing Owner shows a confirmation, Invite as owner?, because this person gets full access, including staff management.
4
Click Send invitation (Gửi lời mời). If the email has no account yet, the platform creates one and sends a link so the invitee sets their own password; nobody else knows it. The new row shows the Pending activation tag (Chờ kích hoạt) until they set it.
5
If the email already belongs to an active customer, that account is converted to staff and keeps its existing pages and plan.

Staff tab with the owner account — Figure 1. The Staff (1) and Roles (4) tabs; the table has one row for the test environment's admin account, tagged You (Bạn), role Owner, plan Doanh nghiệp (Business), with the … button at the end. Invite staff is at the top right. Vietnamese UI.

2. Manage staff accounts#

1
Click the … button at the end of a staff row to open the action menu.
2
Change role (Đổi vai trò): pick another role or Owner and click Save. This item is not shown on your own row.
3
Set plan (Đặt gói): assign a service plan to an admin account, including yourself, to use customer-side features.
4
Resend invitation (Gửi lại lời mời): shown while the invitee has not activated the account.
5
Lock / Unlock (Khoá / Mở khoá): locking signs the person out of every device and blocks sign-in until unlocked.
6
Remove from staff (Gỡ khỏi nhân viên): the person loses admin access immediately; the account still works as a regular customer.

You cannot lock, remove or change the role of your own account; this prevents the platform from losing its last owner.

3. Create and edit roles#

1
Open the Roles tab (Vai trò). The Owner row always has full access. On first use the platform creates 4 sample roles: Manager (daily operations, no sensitive actions or settings), Customer support, Accountant and Moderator (Quản lý, Hỗ trợ khách hàng, Kế toán, Kiểm duyệt). You can edit or delete them freely.
2
The Permissions column summarises each area, e.g. Customers · View or Moderation · full access; the Members column shows how many staff use the role.
3
Click Add role (Thêm vai trò). Enter the Role name (required) and a Description.
4
In the Permissions matrix each row is an area: Overview, Customers, Orders, Plans, Coupons, Referrals, Support, Announcements, Customer pages, Moderation, Settings, Logs. The View column lets the page open; the Edit column is the main write action (Create & edit, Process orders, Reply & handle…); the Other actions column holds sensitive rights such as Lock / unlock, Sign in as, Reset password, Delete account, Refund, Support settings, Data backup.
5
Tick the checkbox in the View or Edit header to select the whole column; Select all at the top right selects every permission. Choosing any permission in an area automatically includes that area's View permission.
6
Click Save (Lưu). At least one permission is required. Use the pencil icon to edit and the bin icon to delete; a role that staff are still using cannot be deleted.

Roles tab with four sample roles — Figure 2. The Roles tab: the Owner row (All) and the four sample roles Manager, Customer support, Accountant, Moderator; the Permissions column shows each area with its level, the Members column, and pencil and bin icons at the end of each row; Add role is at the top right. Vietnamese UI.

Add role dialog with the permission matrix — Figure 3. The Add role dialog: the Role name field (placeholder Hỗ trợ khách hàng), Description, the Permissions matrix with Area, View, Edit, Other actions columns and the Select all link; Cancel and Save in the footer. Captured before saving, with no permission ticked. Vietnamese UI.

When a staff member opens an area where their role only has View, a View only tag (Chỉ xem) appears next to the breadcrumb. Edit buttons may still be visible, but the API rejects any write action.

4. Look up the system logs#

1
Open Admin › Logs (titled System logs — Nhật ký hệ thống). Four KPI cards show Admin activity (actions in the last 24 hours), Suspicious events (security, last 24 hours), Failed queue items (emails/leads not processed) and Failed customer webhooks (last 24 hours). Click a card to jump to its tab.
2
System errors (Lỗi hệ thống): error log files of the API, worker, web and browser. Pick a log file, filter All levels or Errors only (ERROR+), and search the content.
3
Admin activity (Hoạt động quản trị): who did what and when. Filter by action code, object type, Actor (email) and time range (last 24 hours, 7 days, 30 days or Pick dates…). Click a row to see the activity details with Before/After data. Click Export CSV (Xuất CSV) to download.
4
Security (Bảo mật): sign-ins, password changes and 2FA across the platform; includes a Suspicious filter (failed sign-ins, wrong 2FA…) and Export CSV.
5
Queue (Hàng đợi): emails and leads waiting, processing or failed. Click Resend (Run again for leads), Send now or Delete on each item, or Resend all for the failed ones.
6
Customer webhooks: new-lead webhooks sent to customers' systems (Google Sheets, CRM…), filterable by Success, Failed, Sending. Payment webhooks: notifications from payment gateways (Pay2S, SePay, PayOS…) with signature validity, matched order and processing errors.

Admin activity tab in System logs — Figure 4. System logs, Admin activity tab: four KPI cards, the tab row System errors, Admin activity, Security, Queue, Customer webhooks, Payment webhooks; filters for action code, object, Actor (email), All time and the Export CSV button; the settings.backup_updated and backup.telegram_sent rows are test actions on a local environment. Vietnamese UI.

Notes#

1
Grant the minimum permissions needed: rights in the Other actions column (Sign in as, Delete account, Refund, Data backup…) should go only to people who really need them.
2
The Staff page and the Version updates page are owner-only and cannot be granted through a role.
3
Inviting an email that is already staff returns the error “Email này đã là nhân viên” (already staff); accounts that are locked or deleted cannot be invited either.
4
The System errors tab says there are no log files when nothing has been logged yet or the API has not been restarted since logging was enabled.

Staff, permissions and system logsBack to top

PREVIOUS ARTICLECustomer support, system announcements and content moderation

NEXT ARTICLEData backup and version updates