Managing team members
When a colleague changes job, loses their phone or leaves comrce, you change their account on their team member page. You can give them a new role, reset their two-factor sign-in or delete the account. You can only act on roles you have authority over, and never on yourself. Every action asks for confirmation first.
What it does
Section titled “What it does”comrce Hub gives every staff account exactly one role. Every role has authority over a fixed set of other roles. The team member page shows only the actions your role may take on that person:
- Change the role, within your authority over both the old and the new role. The role select.
- Reset two-factor sign-in for someone ranked below you. Every setting, explained.
- Delete the account, which ends every session at once. Every setting, explained.
- Bring a deleted member back by inviting them again. Bring a deleted member back.
The Logs record every role change, two-factor reset and deletion with the email of the admin who did it. So every access change can be traced.
Before you start
Section titled “Before you start”| Requirement | Details |
|---|---|
| Role | Role changes and two-factor resets need Super Admin or Admin. Deleting needs authority over the person, as Understanding role authority shows. |
| The person’s page | Open it from Hub Team with the chevron in their row. |
| Owners of partner cards | Before changing or deleting a Marketplace Partner, note which cards they own. Both actions remove their ownership. |
| Cost | None. |
Understanding role authority
Section titled “Understanding role authority”A role has authority over another role when it may assign, change and delete it. What each role can do:
- As a Super Admin, you can assign, change and delete every other role except your own. You can reset two-factor sign-in for all of them.
- As an Admin, you can assign, change and delete Supporter, Partner, Marketplace Editor, News Editor and Marketplace Partner. You can reset their two-factor sign-in too.
- As a Supporter, you can delete accounts with the staff role Partner. You cannot change roles or reset two-factor sign-in.
- As a Marketplace Editor, you can delete Marketplace Partner accounts, and invite them. You cannot change roles.
- As an Partner, News Editor or Marketplace Partner, you cannot change anyone.
The same rules seen from the target role’s side:
| Target role | Who has authority over it |
|---|---|
| Super Admin | Nobody |
| Admin | Super Admin |
| Supporter | Super Admin, Admin |
| Partner | Super Admin, Admin, Supporter |
| Marketplace Editor | Super Admin, Admin |
| News Editor | Super Admin, Admin |
| Marketplace Partner | Super Admin, Admin, Marketplace Editor |
How comrce Hub decides
Section titled “How comrce Hub decides”Authority is the first condition. Each action adds its own:
| Action | Who may do it | Extra conditions |
|---|---|---|
| Invite | Super Admin, Admin, Marketplace Editor | Authority over the invited role |
| Change the role | Super Admin, Admin | Authority over the current and the new role. Not yourself, not a deleted account |
| Delete | Any role with authority over the person | Not yourself, not already deleted |
| Reset two-factor sign-in | Super Admin, Admin | You rank above the person in Partner < Supporter < Admin < Super Admin. Roles outside that ranking always qualify. Two-factor sign-in is on, and the account is not deleted |
| View Logs | Admin and Super Admin on a team member’s page. On a partner user’s page, also a Marketplace Editor | None |
Worked examples:
| You are | The person is | Change role | Delete | Reset 2FA |
|---|---|---|---|---|
| Super Admin | Admin | Yes, to any role except Super Admin | Yes | Yes |
| Super Admin | another Super Admin | No | No | No |
| Admin | Admin | No | No | No |
| Admin | Supporter | Yes, but not to Admin | Yes | Yes |
| Admin | News Editor | Yes | Yes | Yes |
| Supporter | Partner | No | Yes | No |
| Supporter | Supporter | No | No | No |
| Marketplace Editor | Marketplace Partner | No | Yes | No |
| Partner | anyone | No | No | No |
What does not get changed
Section titled “What does not get changed”- Super Admin accounts. Nobody can change, delete or assign them in the console.
- Your own account.
- Deleted accounts. Their page is read-only.
- Customer users. Their roles and permissions live per company (Company and member lifecycle).
Change, reset or delete a team member’s access
Section titled “Change, reset or delete a team member’s access”-
Open the person. In Hub Team, select the chevron at the end of their row. Their page opens in a new tab.
Every change to a team member starts from their page, opened with the chevron in the list. What this screenshot shows
- Screen
- Hub team
- Highlighted
- “tobias.krueger@example.com”: the chevron at the row end opens the team member page
- Also visible
- Row: Tobias Krüger, Supporter, Active
- Purpose
- entry point to a team member
-
Choose the action. The page shows only what you may do: the role select, Disable 2FA or the red button Delete.
-
Confirm. Every action opens a confirmation dialog. Nothing changes before you confirm.
Every setting, explained
Section titled “Every setting, explained”
Every setting, explained
Section titled “Every setting, explained”Each action below is on the team member page. The partner variant of deleting is on the partner user page.
The role select, change a role
Section titled “The role select, change a role”Under the name on the team member page. Choosing a value opens Confirm role change. Confirm saves.
Replaces the person’s role with exactly the one you chose. Only a Super Admin or Admin with authority over the current role sees it. It lists only roles you have authority over.
- Success shows Updated user role, failure shows Failed to update user role.
- Moving a Marketplace Partner to another role removes them as owner of all their partner cards.
- The person’s open console receives the new role. Their sessions stay.
People change jobs. A role that follows them avoids both missing access and leftover access.
What this screenshot shows
- Highlighted
- “Confirm”: saves the role change from Supporter to Admin
- Also visible
- Role select still Supporter behind the dialog
- Purpose
- confirming a role change
Disable 2FA, reset two-factor sign-in
Section titled “Disable 2FA, reset two-factor sign-in”The two-factor card on the team member page. It asks for confirmation.
Switches two-factor sign-in off for the person and deletes their recovery codes. They sign in with email and password next time and can set it up again. The button appears under the conditions in How comrce Hub decides.
A colleague whose phone is lost cannot sign in at all. This is the only way back without developer help.
What this screenshot shows
- Highlighted
- “Disable 2FA”: opens the confirmation to disable 2FA
- Also visible
- 2FA enabled, type Email; Target role Admin, viewer Super Admin
- Purpose
- resetting a colleague's two-factor sign-in
Delete, delete a team member
Section titled “Delete, delete a team member”The red button Delete in the header of the team member page. The partner user page has the same button. Each asks for confirmation first.
After confirmation, comrce Hub does the following:
- It marks the account Deleted.
- It signs the person out of every open browser and ends all sessions.
- It removes them as owner of any Marketplace partner card.
- It closes their tab and reloads the team list.
The account, its name, email and logs stay. Success shows User deleted..
Access must end the moment someone leaves. Keeping the account keeps the audit trail intact.
What this screenshot shows
- Highlighted
- “Delete”: opens the delete confirmation
- Also visible
- Viewer: Supporter; Role shown as badge (no select); No Disable 2FA button; No View Logs button
- Purpose
- what a Supporter can do on a team member page
What this screenshot shows
- Highlighted
- “Delete”: deletes the team member
- Also visible
- Two active sessions behind the dialog
- Purpose
- deleting a team member
What this screenshot shows
- Highlighted
- “Delete”: opens the delete confirmation
- Also visible
- Signed in as Marketplace Editor; Listings: 3
- Purpose
- deleting a partner account as a Marketplace Editor
Other settings on this page
| Control | What it does | Why |
|---|---|---|
| Cancel in a confirmation dialog | Closes the dialog without a change | Back out of a role change, reset or deletion |
How the settings combine
Section titled “How the settings combine”| Situation | Role select | 2FA reset | Delete |
|---|---|---|---|
| Your own page | Badge | No | No |
| Person within your authority, you are an admin | Select | If ranked below you and 2FA is on | Yes |
| Person within your authority, you are a Supporter or Marketplace Editor | Badge | No | Yes |
| Person outside your authority | Badge | No | No |
| Deleted account | Badge | No | No |
Team members in the team list and the logs
Section titled “Team members in the team list and the logs”| Indicator | Meaning |
|---|---|
| Active, green dot | The account can sign in |
| Deleted, grey dot | Deleted. Listed after the active accounts |
| Role badge | The single role of the account |
The deleted member’s page
Section titled “The deleted member’s page”
What this screenshot shows
- Highlighted
- “Deleted”: none
- Also visible
- Only View Logs available; Active sessions: 0
- Purpose
- what remains after deletion
A deleted member’s page shows the status Deleted and the last role as a badge. It has no sessions and only View Logs. Why: the history of what the person did remains available for audits.
Bring a deleted member back
Section titled “Bring a deleted member back”There is no restore button. Invite the same email address again (Inviting team members and partners). When the person accepts, comrce Hub reactivates the same account. It gets the new role and the name and password they enter, and their earlier logs stay attached.
In the Logs
Section titled “In the Logs”Each change is logged under the person who was changed, with the admin in the payload:
| Event type | Payload |
|---|---|
| User role changed | ActingAdminEmail, NewRole, PreviousRoles |
| User 2FA disabled | editedBy (the admin’s email) |
| Internal user deleted | ActingAdminEmail, TargetRole |
To see the changes one admin made, filter by these event types and read the payloads. Filtering by the admin as user does not show them. Details are in The audit trail.
What you need to know
Section titled “What you need to know”
What you need to know
Section titled “What you need to know”| Topic | Fact |
|---|---|
| One role | Every staff account has exactly one role. A change replaces it. |
| Effect of a role change | Immediate. The person’s console is updated, and sessions stay. |
| Partner cards | Changing a Marketplace partner’s role or deleting the partner removes their ownership. The cards stay. |
| 2FA reset | Turns two-factor sign-in off and deletes recovery codes. It does not end sessions. |
| Deleted accounts | Deletion signs the person out everywhere at once. The account stays as Deleted with its logs. |
| Undo | No undo for deletion. Re-inviting the address reactivates the account. |
| Super Admin | Accounts with this role cannot be changed or deleted in the console. |
Frequently asked questions
Section titled “Frequently asked questions”
Frequently asked questions
Section titled “Frequently asked questions”Who can change a team member’s role?
Section titled “Who can change a team member’s role?”A Super Admin or an Admin with authority over both the current role and the new role. The Supporter and Marketplace Editor roles cannot change roles, even for accounts they may delete.
Why can’t I make someone an Admin?
Section titled “Why can’t I make someone an Admin?”Only a Super Admin has authority over the Admin role. If you are an Admin yourself, the role select on the team member page does not offer it. Ask a Super Admin instead.
Can a team member have two roles?
Section titled “Can a team member have two roles?”No, every staff account has exactly one role. A role change swaps the old role for the new one in a single step. If that fails, nothing changes.
Does a role change sign the person out?
Section titled “Does a role change sign the person out?”No. comrce Hub saves the role and updates the person’s open console with their new access. Their sessions remain, and they do not need to sign in again.
What happens to a Marketplace Partner’s cards when I change their role?
Section titled “What happens to a Marketplace Partner’s cards when I change their role?”Any role other than Marketplace Partner removes the person as owner of every partner card they owned. The cards stay in the Marketplace. Assign a new owner on each card.
Can I change a Super Admin’s role?
Section titled “Can I change a Super Admin’s role?”No. Nobody has authority over Super Admin. The team member page shows only a badge for them. No change, deletion or two-factor reset is possible from the console.
Two-factor sign-in
Section titled “Two-factor sign-in”Who can reset a colleague’s two-factor sign-in?
Section titled “Who can reset a colleague’s two-factor sign-in?”A Super Admin or Admin who ranks above the colleague. The ranking from lowest to highest is Partner, Supporter, Admin, Super Admin (top). Any admin can reset the Marketplace and News roles.
Does resetting two-factor sign-in end the person’s sessions?
Section titled “Does resetting two-factor sign-in end the person’s sessions?”No. Disabling two-factor sign-in changes how the person signs in next time. Their current sessions continue. Delete the account if you need to end sessions immediately.
Can a Supporter reset two-factor sign-in?
Section titled “Can a Supporter reset two-factor sign-in?”Not in the console. The Disable 2FA button appears only for the Admin and Super Admin roles. Ask an Admin who ranks above the person.
Deleting
Section titled “Deleting”Who can delete a team member?
Section titled “Who can delete a team member?”Anyone with authority over the person’s role. A Super Admin deletes everyone except other Super Admin accounts. An Admin deletes everyone below. A Supporter deletes only the staff role Partner, and a Marketplace Editor only Marketplace Partner accounts.
What exactly happens when I delete someone?
Section titled “What exactly happens when I delete someone?”comrce Hub marks the account deleted and signs the person out of every open browser. It ends all their sessions, removes them as owner of partner cards and closes their tab. The account stays in the team list as Deleted.
Are a deleted member’s logs deleted too?
Section titled “Are a deleted member’s logs deleted too?”No. Deleting a team member keeps the account record and every log entry. Open their page from the team list and use View Logs to see their history.
How do I undo a deletion?
Section titled “How do I undo a deletion?”There is no undo button. Invite the same email address again from the team screen. On acceptance, comrce Hub reactivates their old account with the new role and password, and their history stays attached.
Why can a Supporter delete someone with the staff role Partner but not change their role?
Section titled “Why can a Supporter delete someone with the staff role Partner but not change their role?”Deleting needs only authority over the person. The Supporter role has authority over the staff role Partner. Changing roles also needs the Admin or Super Admin role. So a Supporter sees the role as a badge.
Partners and the Marketplace Editor role
Section titled “Partners and the Marketplace Editor role”Can a Marketplace Editor delete a Marketplace Partner?
Section titled “Can a Marketplace Editor delete a Marketplace Partner?”Yes. A Marketplace Editor has authority over Marketplace Partner accounts. The red button Delete is on the partner user page, opened from the team list. Editors cannot change roles or delete any other account.
Can a Marketplace Editor change a partner’s role?
Section titled “Can a Marketplace Editor change a partner’s role?”No. Role changes need the Admin or Super Admin role, and the partner user page has no role select. Ask an admin to change the Marketplace partner’s role on the regular team member page.
Who can change a Marketplace Editor’s role?
Section titled “Who can change a Marketplace Editor’s role?”A Super Admin or an Admin, from the editor’s team member page. Both have authority over Marketplace Editor. They may move the editor to any role within their own authority.
Sessions
Section titled “Sessions”How do I end all of a team member’s sessions?
Section titled “How do I end all of a team member’s sessions?”The team member page lists sessions but has no button to end them one by one. Deleting the account ends every session at once. If the person should keep working, ask them to sign out on their devices or change their password.
Where do I see who changed someone’s role?
Section titled “Where do I see who changed someone’s role?”In Logs, filter the event type User role changed. Each row is listed under the person whose role changed. The payload names the admin as ActingAdminEmail, with the old and new role.
Why don’t an admin’s role changes appear when I filter by that admin?
Section titled “Why don’t an admin’s role changes appear when I filter by that admin?”The Logs record role changes, two-factor resets and deletions under the person who was changed. Filter by the event type instead and read the admin’s email in the payload.
Troubleshooting
Section titled “Troubleshooting”
Troubleshooting
Section titled “Troubleshooting”| Symptom | What to check |
|---|---|
| No role select, only a badge | You are not an Admin or Super Admin. Or it is your own page, the account is deleted, or the person is outside your authority. |
| The role you want is not in the select | It is outside your authority. Ask a Super Admin. |
| Failed to update user role | Someone changed or deleted the person meanwhile. Reload the page and try again. |
| No Disable 2FA button | Two-factor sign-in is already off, you do not rank above the person, or you are not an admin. |
| No Delete button | It is your account, the account is already deleted, or you have no authority over the person. |
| Could not delete user. | Reload the page. Another admin may have deleted the account already. |
| A Marketplace partner can no longer edit their card | Their role was changed or they were deleted, which removes ownership. Set an owner on the card again. |
| A deleted colleague needs access again | Invite their email address again. Acceptance reactivates the account. |