# Administrator Manual

## Initial configuration

1. Open **Settings → Company Settings** and verify legal name, TRN, licence, address, logo, stamp, invoice terms and bank details.
2. Configure branches, departments and cost centres.
3. Review the chart of accounts. Do not delete control accounts used by posted transactions.
4. Review VAT tax codes with the company accountant.
5. Review fiscal years and accounting periods.
6. Create users, assign a branch where applicable and assign the minimum required roles.

## Security and permissions

- Use a unique account for every staff member.
- Keep maker-checker enabled for live accounting.
- Only finance management should receive post, reverse, period-reopen or contra permissions.
- Do not grant `branches.view_all` to normal branch staff.
- Review the audit log after permission, VAT, company or period changes.
- Store e-invoice credentials only through encrypted settings; never place credentials in source code.

## Period controls

Closing a period blocks postings dated inside that period. Reopening requires permission and a reason, and is recorded in the audit trail. Review all unposted documents, bank reconciliations and VAT workings before locking.

## E-invoicing

The included provider is a disabled null adapter. Production submission requires an accredited provider implementation, valid sandbox tests, approved credentials and explicit production activation. A displayed invoice is not evidence of government submission.

## Maintenance

- Run the scheduler and queue worker continuously.
- Review failed queue jobs and application logs.
- Run `php artisan accounting:integrity-check` regularly.
- Apply upgrades first on staging after a verified backup.