Staff and roles
Settings → Staff — subsections Add staff, Sessions, Sign-in (allowed IPs), Setup (roles).
Invite a staff member
- “Add staff”: email and role.
- The person gets a one-time link valid for 24 hours. With it they set their own password and connect 2FA.
- Sign-in — password and authenticator app code.
A staff member can be disabled — their sessions end.
Roles
A custom role is built from dozens of permissions by section: statistics, orders, support, mail, people, partners, log and system, settings (each with “view” and “edit”), staff. The server checks permissions on every action, not just the menu.
Presets for a quick start:
| Preset | Can |
|---|---|
| Operator | Orders and client support. Built-in — cannot be deleted, permissions can be adjusted |
| Finance | Statistics, rates, costs, payouts, payment reconciliation |
| Administrator | Almost everything except staff, security and backups |
The owner can do everything. A staff member with the “Staff and roles” permission can assign roles too — but only within their own permissions and never to owners.
A disabled role leaves its members without permissions until it is enabled.
Addresses (IP)
- Sign-in — allowed admin IPs: each staff member has their own addresses. A new address works immediately, no server change.
- Department addresses — a role has its own IP list (e.g. the team VPN): members are let in from the role's addresses too. Only the owner changes them.
Sessions
Who is in the admin panel now: IP, browser, last activity. Any session can be ended.