Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Minor update for metadata and environment notes. - Added "openclaw" to required bins in metadata. - Included explicit note in metadata: `/data/ in examples refers to $OPENCLAW_DATA_DIR (default: /data/)`.
What This Skill Does
Role-based access control system for Greek accounting firms running on OpenClaw. Manages user accounts across four roles (viewer, assistant, accountant, senior accountant), assigns per-client permissions, and logs every authentication and authorization event locally. Credentials are stored as salted SHA-256 hashes with no external auth services.
Runs fully offline with no external auth provider, keeping all credential and session data inside the firm's own file system.
When to use it
- Onboarding a new assistant with access to a specific set of client accounts
- Pulling an audit report of who accessed a client's financial data last week
- Requiring 2FA for senior accountant logins
- Revoking all active sessions when an employee leaves the firm
- Checking which clients a given accountant is currently authorized to view
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Create a new accountant user maria.g and give her access to clients EL123456789 and EL987654321
- 1Run openclaw auth user-create with username maria.g, role accountant, and full name
- 2Confirm user creation and note the generated temporary password
- 3Run openclaw auth assign-clients to associate EL123456789 and EL987654321 with maria.g
- 4Run openclaw auth check-access to verify maria.g can access both clients
User maria.g created with accountant role, temporary password issued, and client access confirmed for EL123456789 and EL987654321
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.