Authentication & Access Control
Sign in, manage your account, and let admins control who has access.
User login
An authenticated user logs into the CRM application using username/email and password, optionally completing MFA verification.
MFA enrollment
A user enrolls in TOTP-based multi-factor authentication by scanning a QR code with an authenticator app and verifying a code.
Password reset (self-service)
An unauthenticated user requests a password reset, receives a reset link via email, and sets a new password.
Admin creates user account
Admin provisions a new user account with a role, a temporary password, and optionally assigns a reporting hierarchy.
Admin changes user role
Admin changes a your assigned role, immediately affecting their permissions.
Deactivate or reactivate user
Admin deactivates a user (blocking login but preserving records) or reactivates a previously deactivated user.
Change own password
An authenticated user changes their own password.
Admin force-logout or MFA reset
Admin terminates all active sessions for a user or resets their MFA enrollment.
Social login registration & sign-in
A user authenticates and (when permitted) registers an account through an external identity provider — Google, Microsoft, or LinkedIn — using OAuth 2.0 Authorization Code with PKCE and OpenID Connect. The flow covers first-time registration via invitation or domain allowlist, sign-in for already-linked users, and linking a social provider to an existing password account.
Invite a user to the company account
The Owner (or an Admin) invites a person by email and chooses the roles they will hold — including roles built from the Omnichannel reference permission sets — so the invitee can set up their own access.
Adjust permissions for a role or a single user
The Owner creates a role — optionally from an Omnichannel reference permission set — or adjusts the permissions of an existing role or of one user, so that access matches how the company works.
Configure a conversation visibility scope
The Owner decides which conversations a role — or one operator — can see: their own, their own and unassigned, those of the operators they supervise, or all.
Restore owner access to a company
A company has lost Owner access — the Owner left, is locked out, or lost their MFA device and recovery codes. The Platform Operator designates another Admin as Owner or invites a new Owner, without ever signing in as a company user.