DocsFundamentals

Getting Started

A clear guide to configuring your multi-entity architecture, data models, and team roles.

Prime Fatoora is built natively around Saudi compliance laws. Our platform's underlying architecture is designed to support Multi-Entity Data Isolation, meaning you can manage multiple branches seamlessly without needing separate accounts.

Onboarding Prerequisites

Before you can issue any legally binding ZATCA Phase 2 invoices, you must configure at least one Organization and one Branch.

The Data Model

Data isolation and consolidation are handled natively. The hierarchy is strictly top-down:

The Organization (HQ)

Represents the top-level legal entity.
Holds your primary Commercial Registration (CR) and overarching Tax Identification Number (TIN).
Consolidated financial reports (Trial Balance, P&L) aggregate data across all branches here.

Branches & Locations

You can provision multiple Branches under one Organization.
A Branch can represent a physical location, a warehouse, or a specific business division.

ZATCA Tax Payers (Per Branch)

If a Branch operates as an independent Tax Payer with its own CR, it must be onboarded with its own unique Cryptographic Stamp Identifier (CSID). We support per-branch credential management.

Warehouses

Belong strictly to Branches.
Used to track physical inventory and stock movements.

Role-Based Access Control (RBAC)

Security and data privacy are enforced via strict RBAC policies. When inviting team members, you assign them a specific role that dictates their capabilities.

Role	Capabilities
Owner	Full workspace owner access. Unrestricted access to all data, settings, and billing.
Administrator	Full workspace administrator access, similar to Owner but cannot delete the organization or manage billing.
Manager	Can approve operational workflows without accounting posting authority. Can manage sales, CRM, purchases, and inventory.
Accountant	Accounting, tax, posting, reconciliation, and reporting authority. Can lock accounting periods and post journals.
Sales	Sales document creation and customer work. Can draft estimates and manage CRM contacts.

Frequently Asked Questions

Can I restrict a user to only see one branch?

Yes, when inviting a team member (such as a Sales rep), you can scope their access to a single specific branch. They will not be able to see customers or invoices from other branches.

Do I need multiple Fatoora Portal logins?

No, as long as all your branches share the same Commercial Registration (CR) and Tax Identification Number (TIN), you only need one ZATCA CSID onboarded at the Organization level.