User management

Creating accounts, granting roles, and withdrawing access.

Users — accounts, roles and status.

Creating an account

1. Open Users and select New user.
2. Enter First name, Last name and Email.
3. Set an initial Password of at least 8 characters.
4. Choose the Role: Standard or Admin.
5. Select Create.

Expected result. The account exists immediately and can sign in with the credentials you set.

Creating a user — name, email, initial password and role.

Warning · You must deliver the credentials yourself

No invitation or welcome email is sent. Pass the address and initial password to the person through a secure channel, and tell them to change it at first sign-in (Changing your password). Never reuse the same initial password across several accounts.

Common errors

Message	Resolution
An account with this email already exists	Search the list — the account may be archived rather than absent. Restore it instead of creating a duplicate.
A valid email is required	Correct the address.
Password must be at least 8 characters	Set a longer initial password.
Role must be ‘admin’ or ‘standard’	Choose one of the two offered roles.

Changing a role

Use the role selector on the user’s row. The change takes effect the next time that user’s session refreshes.

Warning · Granting Admin grants everything

An administrator can see and modify every owner’s catalogue, manage all users, and change global settings — including demoting or archiving you. There is no intermediate or read-only administrative role. Keep the number of administrators small and review it periodically.

Two changes are refused by design:

• You cannot change your own role — ask another administrator.
• You cannot change your own status — you cannot archive yourself.

The superadministrator account never appears in this list and cannot be modified from it.

Archiving an account

Purpose. Withdraw access when someone leaves, or suspend an account under investigation.

1. Find the user and choose the archive action.
2. Confirm.

Expected result. The account can no longer sign in and is marked Archived. Restoring it re-enables sign-in.

Warning · Archiving a user withdraws their entire catalogue from circulation

This is the most consequential action in AuthPlus and the confirmation dialog does not spell it out: every code belonging to that account stops verifying immediately. Customers scanning their products will see This product has been withdrawn. If your intent is only to stop someone signing in — for example when an employee leaves a brand that must keep selling — reassign or reconsider before archiving. Restoring the account restores all of its codes.

Note · For an urgent revocation

Archiving prevents the account signing in again. If access must be cut off immediately — a lost laptop, a dismissal — archive the account and reset its password, which also ends any session already open on another device.