Account Settings: Team Management

Learn how to navigate Team Management and Account Settings in this document.

Team Management lives under Account Settings. This page walks through each screen and the everyday tasks you can do there. What you see depends on your role, so if a screen or action isn't available to you, you'll see a No Access message.

Quick Navigation

Use this table to jump to what you need. Refer to the right column to follow the path inside the UNBXD dashboard.

If you want to…Where to go
Update your own password or 2FAProfile
Add a teammateAccount Settings > Team Management > Invite User
Change someone's rolesAccount Settings > Team Management > Edit
Remove someone's site accessAccount Settings > Team Management > Revoke access
See all your sitesAccount Settings > Sites
Set up Single Sign-On (SSO)Account Settings > SSO Configuration
Enforce two-factor authentication (2FA)Account Settings > 2FA Configuration
Promote or remove a Super AdminAccount Settings > Team Management > Edit > Super Admin toggle
Transfer account ownershipAccount Settings > Change Ownership

Account Access vs Site Access

Understanding the distinction between account-level and site-level access is essential for managing your team correctly.

  • Account Access refers to permissions that apply across the entire account, including all sites and regions. Roles such as Owner, Super Admin, and Unbxd User operate at this level.
  • Site Access refers to permissions scoped to a specific site. Roles such as Members (Admin, Merchandiser, Analyst, & Developer) are assigned per site.
📘

Note

Admin is part of the Member category and operates at the site level, not the account level.

User Roles

The following roles are available in the platform:

  • Owner – The account holder. Ownership cannot be transferred by the Owner themselves. Has full access to account and site settings.
  • Super Admin – Has full account access except creating sites. Can transfer account ownership. Up to 5 Super Admins are allowed per account.
  • Admin – Operates at the site level. Admin is part of the Member category.
  • Member – Site-scoped role. Includes the Admin role.
  • Unbxd User – Has a personal profile on the account. Can view and edit their own profile.

User Status

StatusCan log in?Available actions
ActiveYesEdit, Revoke access
Invite SentNoCopy invite link, Revoke invite, Resend invite
Invitation ExpiredNoResend invite

Page Access per Role

PageOwnerSuper AdminAdminMemberUnbxd User
Profile
Account Settings
Team Management✅ (view)
Sites✅ (view)
SSO Configuration
2FA Configuration
📘

Note

Owner has access to the Profile page. Admins and Members do not see Account Settings screens.

Permissions by Role

PermissionOwnerSuper AdminAdminMemberUnbxd User
Invite users
Revoke user access
Edit user roles
Transfer Ownership
Toggle Super Admin
Configure SSO
Configure 2FA
View and edit own profile

Note: The Owner is not allowed to transfer or change ownership. Only Super Admins can perform this action.

Role-Based Actions

ActionWho Can Perform
Invite usersOwner, Super Admin, Unbxd user
Revoke user accessOwner, Super Admin, Unbxd user
Copy invite linkOwner, Super Admin, Unbxd user
Revoke invite (pending users)Owner, Super Admin, Unbxd user
Transfer account ownershipSuper Admin, Unbxd user
View and edit own profileAll roles, including Unbxd User

Your Profile

Your Profile is a single, global page available across all regions. It's where you manage your own information and personal security settings.

What you'll see

  • Your user information
  • All sites associated with you (this list is region-specific)
  • Your role on each site

What you can do

  • Change your password (only when SSO is disabled for you): open Profile and use Change password.
  • Reset your 2FA (when 2FA is enabled for you): open Profile and use Reset 2FA.
  • View and edit your profile information.

Good to know

  • SSO is read-only only for Members; it shows your status but can't be changed.
  • The 2FA tab's behaviour depends on whether 2FA is enforced at the account level or managed per user.
  • Your user data syncs globally; only the site list changes by region.

Who can access: All roles, including Unbxd User. Users can view and manage their own profile information based on their assigned permissions.

Account Settings

Account Settings is the hub for everything account-wide. It's available to Owner, Super Admin, and Unbxd User. Admins and Members don't see these screens.

Team Management (User List)

The central list of everyone in your account.

Each row shows: email, roles (including different roles across sites), an Owner indicator, status (Active or Invite Sent), and last login date.

Manage your team members and their permissions

Row actions

ActionAvailable forWhat it does
EditActive usersOpens the user's site-role mapping so you can change roles, or reset their password / 2FA.
Revoke accessActive usersRemoves the user's access to assigned sites and account resources based on their role permissions. Existing active sessions may be terminated. Historical activity remains available for auditing purposes. Not available for the Owner.
Copy invite linkPending usersCopy the invitation link so you can share it directly.
Revoke invitePending usersCancels the pending invitation. The invite link is invalidated immediately.
Resend invitePending usersEmail the invitation again.

Invitation Expired

If a user does not accept an invitation within the configured validity period, the invitation expires automatically.

When an invitation expires:

  • The invitation link is no longer valid.
  • The user cannot access the account.
  • Administrators can resend the invitation to generate a new activation link.
  • The user remains in Team Management until the invitation is accepted or removed.

Invite a New User

Add a teammate and set their access before they log in.

  1. Go to Account Settings > Team Management.
  2. Click Invite User.
  3. Enter the user's email address.
  4. Under Site Permissions, assign their role on each site.
  5. (If account SSO is on) Optionally tick Disable SSO for this user.
  6. Send the invitation. The user shows as Invite Sent until they accept.
📘

Note:

The invite screen only sets Site Permissions. SSO, 2FA, and password options aren't part of this flow.

Edit User

Open Team Management, find an Active user, and click Edit to adjust their access.

  • Change roles: update the user's role on each site, then save.
  • Reset password: use Reset Password (subject to the user's 2FA setup).
  • Reset 2FA: open the 2FA tab (shown only if the user already has 2FA enabled) and choose Reset / Remove 2FA.
  • Make or remove a Super Admin: use the Super Admin toggle.
  • If the Owner, Super admin, and Unbxd user can change, but only members cannot change SSO settings.

Editing the Owner: When you edit the Owner, the site-role dropdowns and the Super Admin toggle are disabled. The Owner's access can't be reduced from here.

Sites

A read-only list of every site in your account, for reference. No actions are available on this screen.

Each site shows: Site Key, Site Name, Site ID, Environment / Tag, and Language.

Single Sign-On (SSO)

Set up SSO so your team signs in through your identity provider.

SSO Configuration

  1. Go to Account Settings → SSO Configuration.
  2. Turn the SSO toggle ON.
  3. Complete the SAML configuration block that appears.
  4. Save the configuration.
  5. Validate the connection using your identity provider.

SSO Login Flow

  1. The user enters their registered email address.
  2. The system identifies the configured identity provider.
  3. The user is redirected to the organisation's identity provider login page.
  4. The user authenticates using corporate credentials.
  5. Upon successful authentication, the user is redirected back to the application.
  6. Access is granted according to the permissions associated with the user's assigned role.

SSO Access and Permissions

  • Only Owner, Super Admin, and Unbxd User can toggle account-level SSO.
  • Authentication through SSO does not grant additional permissions.
  • Users retain the permissions associated with their assigned role.
  • Per-user SSO can only be configured when account-level SSO is enabled.

Two-Factor Authentication (2FA)

Enforce 2FA across your account.

  1. Go to Account Settings → 2FA Configuration.
  2. Turn 2FA ON.

What happens

  • When enabled: every user must set up 2FA at their next login.
  • When disabled: enforcement stops for new users; existing users continue to manage 2FA from their own settings.

Super Admins

A Super Admin has full account access except for creating sites. Super Admins can transfer account ownership. You can have up to 5 per account.

To add or remove one:

  1. Open Edit for the user.
  2. Toggle Super Admin on or off.
  3. Save.

Change Ownership

Transfer ownership of the account to another existing user. Ownership moves at the account level across all sites in all regions, and the previous owner is reassigned a role across the sites. The New Owner dropdown lists every eligible team member except the current owner.

Transfer account ownership to another team member

Who can transfer ownership

  • Super Admin only

Who cannot transfer ownership

  • Owner — not allowed to change or transfer ownership
  • Admin
  • Member
🚧

High-impact action

Changing ownership affects the entire account across every region. Ensure the new owner has the required account-level access before completing the transfer.

User statuses

StatusCan you log in?Available actions
ActiveYesEdit, Revoke access
Invite SentNoCopy invite link, Resend invite
Invitation ExpiredNoResend invite