Team users
You don't have to hand your admin password to whoever runs the door on Friday. Everyone who helps run your venue can have their own login, scoped to what they actually do: open Users in the admin sidebar to set them up. Each action they take is recorded in your venue's audit trail under their own name.
The Users area is visible to the admin (you) and to managers. Other roles never see it.
The roles
| Admin | Manager | Event manager | Door manager | Door staff | |
|---|---|---|---|---|---|
| Events (create, edit, cancel) | ✓ | ✓ | ✓ | – | – |
| Tickets & door sheets | ✓ | ✓ | ✓ | view only | one event, view only |
| Mailing list & campaigns (incl. sending) | ✓ | ✓ | ✓ | – | – |
| Venues | ✓ | ✓ | ✓ | – | – |
| Settings | ✓ | ✓ | – | – | – |
| Reports (sales, page views, mailouts, issues) | ✓ | ✓ | – | – | – |
| Audit log | ✓ | – | – | – | – |
| Payments & Billing (incl. closing the account) | ✓ | – | – | – | – |
| Invite & manage users | ✓ | ✓ | – | – | – |
- Admin — the account created when your venue was set up. There is exactly one, and it can do everything. Only the admin can change Stripe payment settings, manage the Platypus subscription, or close the account (cancelling the subscription from the billing portal).
- Manager — everything an admin can do except payments, billing, the audit log, and touching the admin account itself. Managers can invite and manage users of any role below admin, including other managers.
- Event manager — runs the programme: events, tickets, door links, and the mailing list, including sending campaigns. No access to settings, payments, billing, reports, or users.
- Door manager — sees ticket sales and door sheets, and nothing else; no create or edit anywhere, and never event cancellation. Handy for front-of-house volunteers.
- Door staff — like a door manager, but for one assigned event only: its ticket sales, its door sheets, nothing else. If their event is deleted they keep their login and land on About, where a notice asks them to get an admin or manager to pick their next event. This is the role for the volunteer who's there for one show night.
Anything a role can't do isn't shown: a door manager's sidebar has no Settings, no Mailing list, and nowhere to create an event. Every user gets a Security page for their own password and multi-factor authentication.
Inviting someone
In Users, fill in their name, email address, and role, and send the invitation. Choosing Door staff reveals a Their event select: pick the show they're working — the invitation won't send without one, and you can reassign the event later from their row. The new user gets an email link and sets their own password: you never know it, they never know yours. The link stays valid for 7 days, and the Send set-password link row action issues a fresh one any time; it doubles as a password reset if they're locked out.
One login per email address per venue. If someone leaves and comes back, reactivate their old user rather than creating a twin.
Deactivate, delete, and rescue
Each row's action menu lets you (or a manager):
- Deactivate — access ends immediately (their next click logs them out). Reversible; their history stays intact. Prefer this over deleting for anyone who might return.
- Delete — removes the login permanently.
- Send set-password link — a fresh email link; works as both invitation re-send and password rescue.
- Set password — type a new password for them yourself, for when the email route won't work (a volunteer with no inbox access half an hour before doors). A strength meter and checklist guide you through the password requirements. It takes effect immediately and signs them out everywhere else. Share it securely, and encourage them to change it from their own Security page, since a password you know isn't really theirs.
- Reset MFA — clears a teammate's multi-factor authentication if they've lost their phone and their recovery codes. They log in with password only and re-enrol from their Security page.
The admin account is untouchable
No manager can edit, deactivate, delete, or reset the admin account. No one at all can. Only you manage your own credentials, from your Security page. With email password reset and MFA recovery codes on top, no delegate action can ever lock you out of your own theatre.
If a teammate still can't get in after a fresh set-password link and a direct Set password, email support@platypus.tickets with their address.