Who can create invoices?

Yes. Every invoice action is its own permission, and you can assign it two ways: as part of a role you apply to multiple employees, or granted directly to one employee without going through a role at all.

Go to Staff, then Roles & permissions. The Roles tab is where you build or edit the role you're assigning permissions to. The Permissions tab works differently — it's organized by employee rather than by feature: pick an employee first, and it opens the complete permission catalogue for every area of Nassima, not just invoices, grouped by domain. Invoice permissions sit inside the Finance group there, alongside templates, payments, and export permissions, and that's also where you can grant or revoke a permission directly on that one employee instead of through a role.

These invoice actions are each controlled independently:

• View invoices
• Create invoices
• Update invoices
• Delete draft invoices
• Issue invoices
• Cancel invoices
• Record payments
• Process refunds
• Initiate checkout
• Create invoice share links
• Revoke invoice share links
• Send invoice emails

So someone can record a payment without being able to issue an invoice, or issue one without being able to refund it — whatever split makes sense for how your team actually works, whether you set that up through a role or directly on the person.

Invoice templates, payments, and financial exports each carry their own separate permissions on top of that list, so invoice access alone doesn't hand someone template access or export rights too.

How roles themselves get created and assigned to employees works the same way as for every other module in Nassima — that's covered under Roles and permissions. This is specifically about the invoice permissions available once you're inside that system.

That way, whoever creates and sends your invoices doesn't automatically get to refund them, cancel them, or pull your financial exports — you decide that separately, permission by permission.