Administration: access and sessions

Administration pages require an authenticated admin account. The invitation page is available to people who have received an invitation and have not signed in yet.

Key concepts

• Admin Management lists admin names, email addresses, status, and creation date. An admin can be active or pending.
• An invitation must be accepted and followed by email verification with a one-time code before admin access becomes active.
• Invitations expire after 48 hours. If an invitation has expired, ask an admin to send a new invitation.
• Staff impersonation lets an admin access the portal as a staff member to investigate an issue or provide support. Search by staff name, email, or organization; when working within an organization, the search is limited to that organization.
• You can have only one active staff impersonation at a time in the same browser. Every action taken during staff impersonation is logged with the admin identity.
• Impersonation Sessions shows the admin, the impersonated staff member, the Organization, start time, and status. Status can be Active, Manual, or Expired. Select a session to see its actions.
• System Webhooks are created by admins and apply to all Organizations by default. You can enable or disable them and manage their name, URL, Register, and action.

How to accept an invitation

1. Open the invitation link sent to your email.
2. On Accept Invitation, review the invitation details.
3. If the invitation is valid, select Continue to Login.
4. Sign in and verify your email with the one-time code.
5. If you do not yet have a portal account, select Go to portal sign-up, complete sign-up, and return to the invitation link.

A valid invitation displays a confirmation that the invitation was accepted and identifies the invited email address. If the link is missing its invitation information, invalid, or expired, request a new invitation from an admin.

How to manage organization staff

1. Open Organizations.
2. Select the Organization whose staff you need to access.
3. Select Organizations to return to the Organization list when needed.
4. Open Staff impersonation.
5. Search for a staff member by name, email, or Organization.
6. Select the staff member you need.
7. Enter a Reason of at least 10 characters.
8. Select the option to start impersonation.

Use a clear reason, such as the support issue or investigation you are handling. While staff impersonation is active, you can access the portal as that staff member. End the current impersonation before starting another one.

How to review sessions

1. Open Impersonation Sessions.
2. Review the list, including the admin, impersonated staff member, Organization, start time, and status.
3. Use the session search to find a particular session.
4. Select a session to open its details and review the actions performed during it.

An Active session has not ended. A Manual session was ended deliberately, while an Expired session ended because it reached its expiry. If no sessions exist, the page indicates that sessions will appear after an admin impersonates a staff member.

How to manage webhooks

1. Open System Webhooks.
2. Select Add System Webhook to create one, or choose an existing webhook to edit it.
3. Enter a name and Webhook URL.
4. Choose a Register and the action that should trigger the webhook.
5. Set Webhook Status to Enabled or Disabled.
6. Save the webhook.

Use the status switch in the list to enable or disable an existing System Webhook. The list shows the webhook name, URL, Register, action, status, and when it was last triggered. You can edit or delete a System Webhook from its management controls.

System Webhooks apply to all Organizations by default, so review the Register and action carefully before enabling one.

Tips & things to know

• Send a new invitation if the recipient does not accept it within 48 hours.
• The invitee must both accept the invitation and complete email verification before access becomes active.
• You cannot remove your own admin access from Admin Management.
• Deactivating an admin prevents that person from signing in while keeping the admin information available. Permanent removal requires entering the admin’s full name exactly as shown.
• Keep impersonation reasons specific and useful. They are included with the staff access history.
• Only one staff impersonation can be active at a time in a browser.
• End staff impersonation when you finish investigating so later activity is performed under the correct account.
• A System Webhook can be disabled without deleting its configuration.
• Account Settings currently indicates that account settings will be added soon. Use Back to Settings to return to Settings.

FAQ