---
title: "Team"
description: "Add colleagues, choose their roles, reset passwords, unlock accounts and remove lost devices."
---

> Documentation Index
> Fetch the complete documentation index at: http://localhost:4321/llms.txt
> Use this file to discover all available pages before exploring further.

# Team

> **Administrators only**
>
> This part of the portal is only visible to people with the **Administrator** role. If you can't see it in your menu, ask an administrator. See [Roles and permissions](/reference/roles-and-permissions).

**Administration > Team** lists everyone who can sign in to the portal. Each person shows their email, their roles, when they last signed in, and badges for their status.

| Badge | Meaning |
|---|---|
| **Administrator**, **Operations**, **Fulfilment** | Their roles. |
| **Deactivated** | They can't sign in. |
| **Locked** | Too many wrong passwords. They're locked for 15 minutes. |
| **Temp password** | They haven't yet chosen their own password. |
| **App**, **n passkeys** | The extra sign-in protection they've turned on. |

## Add someone

1. **Choose Add user**

   Enter their **email** (it's their sign-in name and can't be changed later) and their **name**.
2. **Choose their roles**

   See below. Everyone needs at least one.
3. **Give them a temporary password**

   One is generated for you, at least 12 characters. You can generate another or type your own.
4. **Save and pass it on**

   After saving, the page shows the temporary password once. Give it to them privately. They must choose their own at first sign-in.

### Roles

| Role | What it's for |
|---|---|
| **Administrator** | Everything in the portal, including managing users. Ticking this clears and locks the other roles, because it already includes them. |
| **Operations** | Bookings, check-in and customers. The right role for front-of-house staff. |
| **Fulfilment** | Merchandise fulfilment and orders. The right role for whoever packs parcels. |

You can give someone both **Operations** and **Fulfilment**. See [Roles and permissions](/reference/roles-and-permissions) for exactly what each can see.

> **Note**
>
> You can't change your own roles, and at least one active administrator must always exist.

Changing someone's roles signs out their current sessions so the change takes effect straight away.

## Reset a password

Choose **Reset password** on their row. This sets a new temporary password, unlocks the account, and signs them out everywhere. They choose their own password at next sign-in.

## Unlock an account

A **Locked** badge clears by itself after 15 minutes. To let them in immediately, choose **Unlock**.

## Remove a lost device

If someone has lost the phone with their authenticator app, or a device with their passkey, choose **Remove 2FA / passkeys**. This removes their authenticator app and passkeys and signs them out. They can then sign in with just their password and set protection up again under [My profile](/getting-started/my-profile).

## Deactivate and reactivate

**Deactivate** stops someone signing in and signs them out immediately. Use it when someone leaves. Their history stays in the [audit log](/compliance/audit-log). **Reactivate** brings the account back. You can't deactivate yourself.

Source: http://localhost:4321/setup/team/index.mdx