Organization and Team Management

Customize your ISP branding, business profile, and collaborate securely with role-based team permissions.

Managing your ISP identity and team

Your Nukta organization settings allow you to define your company's public identity, configure customer support channels, brand your captive Wi-Fi portals, and invite colleagues with role-based permissions. By giving each employee a dedicated team member account, you maintain accountability across customer updates, router maintenance, and payment reconciliations.

Business profile and branding

Navigate to Settings → Branding to customize how your ISP appears to customers across the captive portal, payment receipts, SMS messages, and self-service account pages:

• ISP Network Name: The legal or trade name of your business (e.g., Mtaani Wireless Solutions). This appears prominently on captive portal login screens, invoice headers, and payment confirmation messages.
• Portal Logo: Upload your high-resolution company logo (PNG, SVG, or WebP). Nukta automatically optimizes and renders your logo on the customer captive login page and invoice receipts.
• Brand Theme Color: Choose an accent color that matches your company palette (such as Indigo, Emerald, Blue, Violet, or Amber). This color styles buttons, active badges, and highlights across both your ISP dashboard and customer-facing portals.
• Public Support Contacts:
  • Support Phone: Displayed on captive portals and SMS notifications so customers experiencing connectivity issues can contact your helpdesk immediately.
  • Support Email: Official customer service email shown on invoices and account notifications.
• Terms & Conditions: Enter your ISP's acceptable use policy and terms of service. When enabled, walk-in hotspot users must agree to these terms before completing their Wi-Fi purchase.
• Country, Timezone & Currency: Anchors all financial transactions, reporting, and customer expiration schedules to your selected region, timezone, and operating currency (e.g., Country, Currency, and Timezone).

Workspace domain and custom URL

Every Nukta ISP workspace receives a dedicated, secure subdomain:

https://{your-prefix}.nukta.one

Under Settings → Domain, you can review your active subdomain or initiate a domain prefix update.

CAUTION

Domain Changes Caution

Changing your workspace subdomain updates the URL where your team signs in, the address embedded in MikroTik provisioning commands, and the payment callback URLs registered with your payment gateways. Always update your router walled gardens and notify team members before making production domain changes.

Role-based access control (RBAC)

Nukta implements role-based access control to protect sensitive financial data and prevent accidental network reconfigurations. Rather than sharing a single administrator password among all employees, invite each team member with an individual account tailored to their job responsibilities.

Nukta provides five predefined roles:

1. Owner / Administrator

• Full Access: Unrestricted authority across all modules, including billing, payouts, payment gateway credentials, team management, router provisioning, and audit logs.
• Designed For: ISP founders, managing directors, and chief technology officers (CTOs).

2. Finance / Accounts

• Capabilities: Access to Internet Packages, Payments ledger, Customer Invoices, Prepaid Vouchers, Expense logging, and financial Analytics with complete revenue visibility.
• Restrictions: Cannot reconfigure physical routers, access WireGuard keys, or modify system-wide branding.
• Designed For: Accountants, billing managers, and cash reconciliation clerks.

3. Customer Support

• Capabilities: Access to the Customer directory, Trouble Tickets, Sales Leads, and Live Active Sessions. Can create new customers, look up payment receipts by phone number or transaction reference, extend customer plan expiry, and assign support tickets.
• Restrictions: All financial revenue figures, company cash flow cards, and router provisioning secrets are completely hidden.
• Designed For: Customer care agents, call center operators, and front-desk personnel.

4. Technician / Network Engineer

• Capabilities: Access to MikroTik Routers, Equipment inventory, Internet Packages, Trouble Tickets, and Live Active Sessions. Can run provisioning commands, verify WireGuard connectivity, monitor CPU/memory load, reboot devices, and kick hung sessions.
• Restrictions: Zero access to billing payments, company expenses, financial revenue, or payment gateway API keys.
• Designed For: Field engineers, fiber splice technicians, and NOC operators.

5. Marketing

• Capabilities: Access to the Sales Leads pipeline, outbound SMS messaging, broadcast campaigns, customer growth trends, and referral performance.
• Restrictions: No access to payment credentials, router configurations, or financial banking details.
• Designed For: Sales representatives and customer growth managers.

Inviting team members

To invite a new team member to your ISP workspace:

1. In your dashboard, open Team from the sidebar or profile menu.
2. Click Add Team Member.
3. Enter the team member's details:
   • Full Name
   • Work Email Address
   • Mobile Phone Number
   • Password: Create an initial password or generate a secure temporary credential.
   • Assigned Role: Select from Finance, Support, Technician, or Marketing.
4. Router Restrictions (Allowed Mikrotiks): For field technicians and regional agents, you can restrict their visibility to specific routers. When configured, the team member can only view and manage customers connected to their assigned sites.
5. Click Create Member. The team member can now sign in at your workspace URL using their email and password.

Granular custom permissions

If a team member requires a unique combination of responsibilities (for example, a Senior Support Agent who also needs to generate prepaid voucher batches), you can customize individual action permissions:

1. Open Team.
2. Locate the team member and click Edit Permissions.
3. Toggle specific granular permissions across modules:
   • Customers: View List, View Details, Create, Edit, Delete.
   • Finance: Manage Invoices, View Payments, Create Vouchers, Log Expenses.
   • Network: View Routers, Run Provisioning, Manage Equipment.
   • Tickets: Create Tickets, Reassign Tickets, Resolve Tickets.
4. Click Save Permissions. The changes take effect immediately across all active sessions.

Team security best practices

• Individual Accounts: Always create unique logins for each team member. This ensures the immutable Audit Log accurately attributes every customer renewal, ticket update, and package edit to the responsible individual.
• Enable Two-Factor Authentication (2FA): Require team members with administrative or finance access to enable 2FA under Settings → Security & 2FA.
• Offboarding Departing Team Members: When an employee leaves the company, immediately open Team, locate their account, and set their status to Inactive or click Remove Member. This revokes their access across all devices in real time.