GuideReviewed 2026-09-29

Administer: users, roles, settings, connections

Ongoing administration: change a user's access, two-factor authentication and passwords, record a change in law as a dated rule, find who changed something, rename labels and connect an AI assistant.

12. Administer: users, roles, settings, connections

Once the organization is running, administration is mostly about people and policies: giving a user a different role or deactivating someone who has left, two-factor, passwords and sessions, recording a change in law as a new dated rule, finding out who changed a record, renaming screen labels to the organization's own words, and allowing AI assistants to work in NirmaanOne as a user. This is the administrator's chapter; the finance head owns the dated rules.

Before you start

01. Set up the organization for roles and users; the dated rules build on Effective-dated rules. Most actions here need the administrator's permissions on Users, Roles & Permissions and Organization Settings.

In this chapter

Change a user's roles, or deactivate a user: Give a user a different role, or deactivate someone who has left.
Set up two-factor authentication and require it for everyone: Set up an authenticator app and require two-factor for everyone.
Reset a user's two-factor authentication: Let someone who lost their phone and backup codes sign in again.
Record a change in law or policy as a dated rule: Add a dated rule when TDS, the escrow share the bank sweeps to the RERA separate account, or the cancellation policy changes.
Find out who changed something: Read a record's History and follow it into the Audit log.
Turn on AI connectors and connect an assistant: Allow AI connectors and connect Claude, ChatGPT or another assistant.
Users: Roles, deactivation and re-sent invitations.
My Profile: Your own name, phone, password, two-factor settings and Sign out everywhere.
Two-factor sign-in: Codes, backup codes and what happens when they run out.
Forgot your password?: Ask for a reset link.
Choose a new password: Choose a new password; it signs you out everywhere.
Organization: Two-factor requirement, AI connectors switch and the dated rules.
Audit log: The organization-wide log of changes, sign-ins and downloads.
History panel: The History panel on a record.
AI connectors: Connections, what they have done, and revoking one.
Connect an app (<app> wants to connect to NirmaanOne): The consent page an assistant sends you to.
Renaming screen labels: Change field, tab and sidebar wording to your organization's own terms.
User accounts: invitations, status and sign-in: Invitations, the four statuses and how sign-in works.
Effective-dated rules: Why a change in law is a new dated rule, never an edit of the old one.
Audit trail and record history: What an audit entry records and how entries make a record's history.
AI connectors: What an assistant can and cannot do when it acts as you.

What comes next

This is the last chapter. For a question that cuts across chapters, the glossary lists every term with a link to its concept article, and each screen article's Related section leads to the how-tos and troubleshooting articles for that screen.

Change a user's roles, or deactivate a userHow-to
Give a user a different role from Settings > Users, or deactivate someone who has left so they are signed out everywhere and can't sign in, and reactivate them if they come back.
Set up two-factor authentication and require it for everyoneHow-to
Turn on two-factor authentication for your own account with an authenticator app on My Profile, save your backup codes, sign in with a code, and then, as an administrator, require it for every user of the organization.
Reset a user's two-factor authenticationHow-to
When a user has lost both their authenticator app and their backup codes, an administrator resets their two-factor authentication from Settings > Users so they can sign in again with their password.
Record a change in law or policy as a dated ruleHow-to
When the TDS rate or threshold, the RERA escrow share or your booking cancellation policy changes, add a new rule with the date it takes effect on Settings > Organization, so documents dated before keep the old figures and those dated after use the new ones.
Find out who changed somethingHow-to
Open a record's History to see who changed it, when and what the values were before and after, then follow it into the Audit log to narrow by person, action or date and see everything saved in the same request.
Turn on AI connectors and connect an assistantHow-to
An administrator allows AI connectors for the organization; each user then adds NirmaanOne to Claude, ChatGPT or another MCP client with the server URL, allows the connection, and can review or disconnect it later.
UsersScreen
The people in your organization: invite new users, change their role, deactivate or reactivate them, reset a lost two-factor authentication, and resend or revoke pending invitations.
My ProfileScreen
Your own account: see your email, organization and roles, change your name and phone, change your password, turn two-factor authentication on or off, and sign out everywhere.
Two-factor sign-inScreen
Turn on two-factor authentication with an authenticator app, sign in with a 6-digit code or a backup code, manage your backup codes, and what happens when your organization requires it.
Forgot your password?Screen
Ask for a password reset link by email when you can't remember your password.
Choose a new passwordScreen
The page the password reset email opens: choose a new password, which signs you out everywhere so you can sign in again with it.
OrganizationScreen
Your organization's profile and policies: name and invitation expiry, the two-factor requirement, the AI connectors switch, the help-assistant recording switch, the project defaults every project inherits (RERA gate, estimate validity, the two chargeable areas, carpet area offered, revenue method and trigger) and the effective-dated rules: the RERA escrow share that splits every sweep of a project's collection account, TDS on sales and booking cancellation.
Audit logScreen
The organization-wide change log: every create, change and delete, every sign-in (including refused ones), sign-out and downloaded file, with who did it, when, from where and what changed.
History panelScreen
See who changed a record, what they changed and when, including the record's lines, newest first, and jump to the full audit log.
AI connectorsScreen
Connect Claude, ChatGPT or another AI assistant to NirmaanOne so it can act as you, see what your connections have done, and disconnect them; administrators see and revoke everyone's.
Connect an app (<app> wants to connect to NirmaanOne)Screen
The consent page an AI assistant sends you to when it asks to work in NirmaanOne on your behalf: see what it will be able to do, then allow or deny it.
Renaming screen labelsScreen
Change the wording of field names, tabs, column titles and sidebar items to your organization's own terms, on one screen or everywhere, and reset them to the built-in text.
User accounts: invitations, status and sign-inConcept
How a person gets an account (by invitation), the four user statuses and how they are derived, how long an invitation link lives, what happens at sign-in with and without two-factor authentication, how long a session lasts, and what deactivation does.
Effective-dated rulesConcept
Rules that change over time (the RERA escrow share, TDS on sales, booking cancellation forfeiture, the revenue policy and cost budgets) are kept as dated rows; the row in force on a date is the latest one starting on or before it, so old documents keep the figures they were made with.
Audit trail and record historyConcept
What an audit entry records (who changed what, when, from where, with before and after values), how entries group into a record's history and a project's history, and who may read them.
AI connectorsConcept
How an AI assistant such as Claude or ChatGPT connects to NirmaanOne, acts as one user within that user's role, what it can and cannot do, and how connections are watched and stopped.