Appearance
Admin Users
Manage admin users who have access to your Batch platform dashboard.
Overview
Control who can access your platform and what actions they can perform through user management and role-based permissions.
User Types
Admin Users
Platform administrators with varying levels of access:
- Super Admin: Full platform access
- Admin: Most features, limited settings
- Manager: Daily operations, no settings
- Staff: Limited access to specific features
Customer Users
End customers who use your app/site (managed separately in Customer Management).
Adding Admin Users
Create New User
- Navigate to Settings > Team > Users
- Click Add User
- Enter user information:
- First name
- Last name
- Email address
- Phone number (optional)
- Assign role
- Set permissions (if custom)
- Send invitation
Invitation Process
- User receives email invitation
- Clicks activation link
- Sets password
- Confirms account
- Gains access based on assigned role
User Roles
Super Admin
Full Access:
- All platform features
- Billing and subscription
- User management
- Integration settings
- API keys
- Danger zone actions
Use Cases:
- Business owner
- Technical lead
- Account administrator
Admin
Access to:
- Products
- Orders
- Customers
- Loyalty program
- Marketing
- Reports
Restricted:
- Billing settings
- User management
- Critical settings
- API keys
Use Cases:
- Operations manager
- Marketing manager
Manager
Access to:
- View products
- Process orders
- View customers
- Basic reporting
Restricted:
- Cannot create/delete products
- Cannot modify loyalty settings
- Cannot access settings
- Limited reports
Use Cases:
- Store manager
- Customer service lead
Staff
Limited Access:
- View orders
- View customers
- Process returns/refunds
- Basic product lookup
Restricted:
- Cannot create anything
- View-only for most features
- Cannot access reports
- Cannot modify settings
Use Cases:
- Customer service rep
- Sales associate
- Support staff
Custom Roles
Create custom roles with specific permissions:
- Navigate to Settings > Team > Roles
- Click Create Role
- Name the role
- Select permissions
- Save and assign to users
Permissions
Granular Controls
Set permissions by feature area:
Products:
- View products
- Create products
- Edit products
- Delete products
- Manage inventory
- Import/export
Orders:
- View orders
- Create orders
- Edit orders
- Cancel orders
- Process refunds
- Export orders
Customers:
- View customers
- Edit customers
- Delete customers
- View customer data
- Export customer data
- Send communications
Loyalty:
- View loyalty data
- Create campaigns
- Edit campaigns
- Delete campaigns
- Adjust points
- Manage tiers
- Create rewards
Marketing:
- Send emails
- Send SMS
- Create promotions
- View analytics
- Export data
Settings:
- General settings
- Payment settings
- Shipping settings
- Integration settings
- Team management
- Billing
Managing Users
View User List
See all admin users:
- Name and email
- Role
- Last login
- Status (active/inactive)
- Actions
Edit User
Modify user details:
- Click user from list
- Update information
- Change role
- Adjust permissions
- Save changes
Deactivate User
Temporarily disable access:
- Select user
- Click Deactivate
- Confirm action
- User cannot log in
- Can be reactivated later
Delete User
Permanently remove user:
- Select user
- Click Delete
- Confirm deletion
- User account removed
- Actions attributed to user preserved
Resend Invitation
If user didn't receive or lost invitation:
- Click user
- Select Resend Invitation
- New email sent
Security
Password Requirements
Enforce strong passwords:
- Minimum 8 characters
- Uppercase and lowercase
- Numbers
- Special characters
- Cannot reuse last 5 passwords
Two-Factor Authentication (2FA)
Additional security layer:
Setup:
- User navigates to profile
- Enables 2FA
- Scans QR code with authenticator app
- Enters verification code
- Saves backup codes
Options:
- Authenticator app (recommended)
- SMS codes
- Backup codes
Enforcement:
- Optional for users
- Can be required for roles
- Recommended for Super Admins
Login Security
Additional protections:
Session Management:
- 7-day session expiry
- Remember device option
- Force logout on all devices
Failed Login Protection:
- Account locked after 5 failed attempts
- 30-minute lockout period
- Notification email sent
IP Restrictions:
- Whitelist specific IP addresses
- Block suspicious IPs
- Geographic restrictions
Activity Logging
Track admin actions:
- User logins
- Permission changes
- Critical actions
- Failed login attempts
- Export logs for audit
User Profile
Personal Settings
Each user can manage:
Account Information:
- Name
- Phone
- Profile photo
Security:
- Change password
- Enable 2FA
- View active sessions
- Connected apps
Preferences:
- Timezone
- Language
- Date format
- Email notifications
Notifications:
- Email preferences
- Alert settings
- Digest frequency
Team Collaboration
Activity Feed
See what team members are doing:
- Recent actions
- Who made changes
- Timestamp
- Affected items
Comments & Notes
Collaborate on records:
- Add notes to orders
- Comment on customers
- Tag team members
- Internal discussion
Assignments
Assign tasks to users:
- Assign orders
- Assign support tickets
- Assign follow-ups
- Track completion
Best Practices
User Management
- Principle of Least Privilege: Give minimum access needed
- Regular Audits: Review users quarterly
- Offboarding: Remove access immediately when employee leaves
- Unique Accounts: Never share login credentials
- Role Clarity: Clear role definitions
Security
- Enforce 2FA: Especially for admins
- Strong Passwords: Require complex passwords
- Monitor Activity: Review activity logs
- Regular Reviews: Audit permissions quarterly
- Security Training: Educate team on security
Documentation
- Document Roles: Clear role descriptions
- Process Documentation: How to handle common scenarios
- Contact List: Emergency contacts
- Escalation Path: Who to contact for issues
Troubleshooting
User Can't Login
Check:
- Account status (active?)
- Email verification
- Password reset needed
- 2FA issues
- Account lockout
Solutions:
- Resend verification email
- Reset password
- Clear lockout
- Disable/reconfigure 2FA
Permission Issues
User can't access feature:
- Check assigned role
- Review custom permissions
- Verify feature in plan
- Check for conflicts
Missing Invitation Email
- Check spam folder
- Resend invitation
- Verify email address
- Whitelist sender email