Skip to content
comrce Hubcomrce HubAdmin Guide

A team member's details

For: Staff with the Super Admin or Admin role who manage the team, and with the Supporter or Partner staff role who look people upRequires: The staff role Partner or higher to open the page; what you can change depends on your role and theirsScreenshots show sample data

Everything about one colleague’s access sits on one page: their role, two-factor sign-in and active sessions.

From here you change the role, reset two-factor sign-in, delete the account or open its logs. Open it from Hub Team with the chevron in the person’s row. You see only the buttons your role allows for this person.

What you can do here

Section titled “What you can do here”
  • Change the person’s role. The role select offers only roles you have authority over, and every change asks for confirmation. Change the role · Managing team members.
  • Reset two-factor sign-in. Disable 2FA helps someone who lost their authenticator or email access. Reset two-factor sign-in.
  • Delete the account. The red button Delete ends the person’s access and signs them out everywhere. Delete the account.
  • See where the person is signed in. The sessions table lists every active session with browser, device and expiry. Every control, explained.
  • Read the person’s audit trail. View Logs opens the Logs filtered to this account. The audit trail.

The screen at a glance

Section titled “The screen at a glance”
The page of the team member Sophie Wagner, opened by a Super Admin. The profile card shows her initials, name, sophie.wagner@example.com and the status Active. At the top right are "View Logs" and the red "Delete" button. Below the name is the role select showing "Supporter", which is highlighted. The card on the right, "Two-Factor Authentication", says 2FA is enabled, type Authenticator, with a red "Disable 2FA" button. The "Active sessions" table lists two sessions with Created, Expires, Browser, Device and User Agent: Chrome 133 on a desktop and Mobile Safari 18.3 on a phone.The page of the team member Sophie Wagner, opened by a Super Admin. The profile card shows her initials, name, sophie.wagner@example.com and the status Active. At the top right are "View Logs" and the red "Delete" button. Below the name is the role select showing "Supporter", which is highlighted. The card on the right, "Two-Factor Authentication", says 2FA is enabled, type Authenticator, with a red "Disable 2FA" button. The "Active sessions" table lists two sessions with Created, Expires, Browser, Device and User Agent: Chrome 133 on a desktop and Mobile Safari 18.3 on a phone.
A team member's page: role, logs, delete, two-factor status and active sessions in one place.
What this screenshot shows
Highlighted
“Supporter”: opens the list of roles this viewer may assign
Also visible
View Logs and Delete; 2FA enabled, Authenticator, Disable 2FA; Active sessions: 2
Purpose
the team member page as it opens
RegionWhat it showsWhat you do there
Profile card, topAvatar or initials, full name, email, status dotIdentify the person
Profile card, top rightView Logs and the red button DeleteOpen logs, delete
Profile card, bottomThe role select, or a plain role badge when you may not change itChange the role
Two-factor card, rightEnabled or Not Enabled, the method (Authenticator or Email), and Disable 2FAReset two-factor sign-in
Active sessionsOne row per session: Created, Expires, Browser, Device, User AgentCheck where the person is signed in

The page reloads its data every 60 seconds.

Change a colleague’s role when their job changes

Section titled “Change a colleague’s role when their job changes”

A colleague moves from support to the Marketplace team? Give them the role for the new job here. comrce Hub saves it when you confirm, and the Logs record who changed it.

  1. Open the role select under the person’s name. It lists only the roles you may assign.

    Sophie Wagner's team member page with the role select open. The list offers only the roles the signed-in Super Admin may assign: "Admin", "Supporter" (ticked, the current role), "Partner", "Marketplace Editor", "Marketplace Partner" and "News Editor". "Super Admin" is not offered to anyone. The option "Partner" is highlighted. Choosing an option does not save yet: comrce Hub first asks for confirmation.Sophie Wagner's team member page with the role select open. The list offers only the roles the signed-in Super Admin may assign: "Admin", "Supporter" (ticked, the current role), "Partner", "Marketplace Editor", "Marketplace Partner" and "News Editor". "Super Admin" is not offered to anyone. The option "Partner" is highlighted. Choosing an option does not save yet: comrce Hub first asks for confirmation.
    The role select lists only the roles you have authority over. Super Admin is never among them.
    What this screenshot shows
    Highlighted
    “Partner”: starts a role change to the staff role Partner
    Also visible
    Options offered to a Super Admin viewer: Admin, Supporter, Partner, Marketplace Editor, Marketplace Partner, News Editor
    Purpose
    which roles can be assigned

  2. Choose the new role. Nothing is saved yet. The dialog Confirm role change opens.

    The confirmation dialog "Confirm role change" that opens after choosing a new role on a team member's page. It asks "Are you sure you want to change this user's role?" and has two buttons: "Cancel", which keeps the current role, and the highlighted "Confirm", which saves the new role at once, writes a "User role changed" entry to the logs and shows the toast "Updated user role".The confirmation dialog "Confirm role change" that opens after choosing a new role on a team member's page. It asks "Are you sure you want to change this user's role?" and has two buttons: "Cancel", which keeps the current role, and the highlighted "Confirm", which saves the new role at once, writes a "User role changed" entry to the logs and shows the toast "Updated user role".
    A role change only takes effect after Confirm.
    What this screenshot shows
    Highlighted
    “Confirm”: saves the new role
    Also visible
    Title: Confirm role change; Buttons: Cancel, Confirm
    Purpose
    the confirmation step of a role change

  3. Select Confirm. comrce Hub saves the role, shows Updated user role and updates the team list.

Both the old and the new role must be within your authority. What each role can do here:

  • As a Super Admin, you can change anyone except another Super Admin. You can assign every role except Super Admin.
  • As an Admin, you can change the roles below yours. For example, you can move a Supporter to News Editor. You cannot change another Admin or make anyone an Admin.
  • As any other role, you see the role as a badge.

Nobody can change their own role.

Reset two-factor sign-in for a colleague who lost their phone

Section titled “Reset two-factor sign-in for a colleague who lost their phone”

A lost phone shouldn’t lock a colleague out for days. Reset two-factor sign-in here. They then sign in with email and password, and set it up again themselves.

Disable 2FA appears when all of these are true:

  • The person has two-factor sign-in on, and the account is not deleted.
  • You are an Admin or a Super Admin.
  • You rank above the person.

The ranking from lowest to highest is Partner, Supporter, Admin, Super Admin (top). The Marketplace Editor, Marketplace Partner and News Editor roles are outside it. Any admin may reset them. Without that rank, the reset fails with You do not have permission for this action..

The confirmation dialog "Disable 2FA for this user?" that opens from the "Disable 2FA" button on a team member's page. The text reads "Are you sure you want to disable two-factor authentication for this user?". The buttons are "Cancel" and the highlighted "Confirm". Confirming switches two-factor sign-in off for the account, removes its recovery codes and shows "2FA disabled successfully.".The confirmation dialog "Disable 2FA for this user?" that opens from the "Disable 2FA" button on a team member's page. The text reads "Are you sure you want to disable two-factor authentication for this user?". The buttons are "Cancel" and the highlighted "Confirm". Confirming switches two-factor sign-in off for the account, removes its recovery codes and shows "2FA disabled successfully.".
Disabling a colleague's two-factor sign-in always asks for confirmation.
What this screenshot shows
Highlighted
“Confirm”: disables two-factor authentication for the member
Also visible
Title: Disable 2FA for this user?; Buttons: Cancel, Confirm
Purpose
confirmation before a 2FA reset

After Confirm, two-factor sign-in is off and the person’s recovery codes are removed. The card shows Not Enabled. The person signs in next time with email and password only. They can set up two-factor sign-in again in their own settings.

Delete the account

Section titled “Delete the account”

The red button Delete appears when you have authority over the person’s role. It is hidden on your own account and on a deleted one. Confirm in the dialog Delete internal user? with Delete.

The confirmation dialog "Delete internal user?" for Sophie Wagner. The text reads "Are you sure you want to delete Sophie Wagner? This will remove their access and log them out. This action cannot be undone." The buttons are "Cancel" and the highlighted confirm button "Delete". Confirming deletes the account, signs the person out everywhere and closes their tab.The confirmation dialog "Delete internal user?" for Sophie Wagner. The text reads "Are you sure you want to delete Sophie Wagner? This will remove their access and log them out. This action cannot be undone." The buttons are "Cancel" and the highlighted confirm button "Delete". Confirming deletes the account, signs the person out everywhere and closes their tab.
Deleting a team member signs them out everywhere and closes their tab.
What this screenshot shows
Highlighted
“Delete”: deletes the team member
Also visible
Title: Delete internal user?; Buttons: Cancel, Delete
Purpose
confirmation before deleting a team member

After you confirm, comrce Hub does the following:

  • It marks the account Deleted.
  • It ends all of the person’s sessions and signs them out of every open browser.
  • It removes them as owner of any Marketplace partner card.
  • It closes their tab and reloads the team list.

The page stays readable afterwards. There is no undo button. Inviting the same email again brings the account back (Managing team members).

Every control, explained

Section titled “Every control, explained”

The role select

Section titled “The role select”
Where

Under the name in the profile card. Choosing a value opens Confirm role change. Nothing is saved until you confirm.

What

Lists the roles you have authority over, in this order:

  1. Admin
  2. Supporter
  3. Partner
  4. Marketplace Editor
  5. Marketplace Partner
  6. News Editor

A plain badge replaces it when you may not change this person. That is the case on your own page and on a deleted account. It is also the case for a Supporter or Partner viewer, and for anyone above your authority. On failure, the toast Failed to update user role appears.

Why

Roles are the only access control for staff, and every account has exactly one.

Two-factor card and Disable 2FA

Section titled “Two-factor card and Disable 2FA”
Where

The card at the right. The button sits under the status and asks for confirmation.

What

Shows Enabled with the method, or Not Enabled. The button switches two-factor sign-in off and clears the recovery codes. The toast is 2FA disabled successfully..

Why

A colleague who lost their phone is locked out until someone resets their second factor.

View Logs

Section titled “View Logs”
Where

The outlined button at the top right of the profile card. An Admin and a Super Admin see it. A Supporter does not see it on a team member’s page.

What

Opens a new Logs tab named after the person, filtered to their account, with the actor switch on Internal. It shows what the person did in the console. It does not show what they did in customer accounts with a service PIN.

Why

“What did this colleague change last week?” is the first question in any access review.

Delete

Section titled “Delete”
Where

The red button next to View Logs. It asks for confirmation in the dialog Delete internal user?.

What

Deletes the account as described in Delete the account. On failure, the toast Could not delete user. appears.

Why

When someone leaves comrce or a Marketplace partnership ends, their access must end the same day.

Active sessions

Section titled “Active sessions”
ColumnWhat it showsWhy
CreatedWhen the person signed in on that deviceSpot unexpected sign-ins
ExpiresWhen the session ends without activityKnow how long access lasts
BrowserBrowser and versionRecognise the device
DeviceDevice type, or the operating systemDesktop or phone
User AgentThe full browser identification stringDetails for a security check

The sessions table is read-only. Deleting the account is the way to end all sessions at once.

Other controls on this page

ControlWhat it doesWhy
Cancel in a confirmation dialogCloses the dialog without a changeBack out of a role change, reset or deletion

Who sees what

Section titled “Who sees what”
Part of the pageWho sees it
The pageSuper Admin, Admin, Supporter, Partner
View LogsSuper Admin, Admin
Role selectSuper Admin and Admin, for people within their authority
DeleteAnyone with authority over the person’s role: Super Admin (everyone except Super Admin), Admin (everyone below), Supporter (Partner only)
Disable 2FASuper Admin and Admin, for people ranked below them

Frequently asked questions

Section titled “Frequently asked questions”

Roles

Section titled “Roles”

Why can’t I change this person’s role?

Section titled “Why can’t I change this person’s role?”

Only a Super Admin or Admin gets the role select. They need authority over both the current role and the new one. Otherwise you see a plain role badge. That includes your own page, deleted accounts and anyone at or above your level.

Why is Super Admin not in the role list?

Section titled “Why is Super Admin not in the role list?”

No role has authority over Super Admin, so comrce Hub never offers it in the console. Nobody can invite, assign, change or delete a Super Admin account from the team member page.

Does the person have to sign in again after a role change?

Section titled “Does the person have to sign in again after a role change?”

No. comrce Hub saves the new role and updates the person’s open console with what they may now see. Their sessions stay active.

Two-factor sign-in

Section titled “Two-factor sign-in”

A colleague lost their phone. How do I let them sign in?

Section titled “A colleague lost their phone. How do I let them sign in?”

Open their page from the team list, select Disable 2FA in the two-factor card and confirm. They can then sign in with email and password. They set up two-factor sign-in again in their own settings.

Why don’t I see the Disable 2FA button?

Section titled “Why don’t I see the Disable 2FA button?”

The button needs four things. You are an Admin or Super Admin, and you rank above the person. Their two-factor sign-in is on, and the account is not deleted. An Admin cannot reset the second factor of another Admin.

Deleting

Section titled “Deleting”

What happens when I delete a team member?

Section titled “What happens when I delete a team member?”

comrce Hub marks the account deleted, ends every session and signs the person out of all open browsers. It also removes them as owner of their Marketplace partner cards. The account stays in the team list with the status Deleted, and its logs remain.

How do I know the deletion worked?

Section titled “How do I know the deletion worked?”

After you confirm with Delete, the toast User deleted. appears. The person’s tab closes and the team list shows the account as Deleted. If Could not delete user. appears instead, reload the page.

Can I delete myself?

Section titled “Can I delete myself?”

No. comrce Hub hides the delete button on your own page and refuses a self-deletion. Ask another admin with authority over your role to delete your account.

Troubleshooting

Section titled “Troubleshooting”
SymptomWhat to check
Could not load user infoThe account may no longer be a staff account, or your role may not open this page. A Marketplace Editor opens Marketplace partners from the team list instead.
Failed to update user roleSomeone else changed or deleted the account meanwhile, or the role is outside your authority. Reload the page and try again.
Could not delete user.The account was already deleted, or your role has no authority over it. Reload the page.
Error disabling 2FA.Reload the page. If the card already shows Not Enabled, someone else reset it.
A Marketplace partner lost their partner cards after a role changeChanging a Marketplace Partner to another role removes them as owner. Set them as owner again on each partner card.
Section titled “Related”