Designating Authorised Users

1. Account admin role

Each customer account has at least one designated Account Admin. The Account Admin can add, remove or modify other authorised users.

2. Roles available

• Account Admin — full access including billing, user management, deletion.
• Editor — content edit, publish, delete; cannot manage users or billing.
• Author — content edit and submit for review; cannot publish.
• Viewer — read-only access including analytics.

3. Security requirements

Multi-factor authentication required for Account Admin and Editor roles. Strong passwords (12+ characters) enforced for all users. Sessions expire after 30 days idle.

4. Audit logs

All user actions logged with timestamp, IP address, user identifier. Logs retained for 1 year and exportable on request.

5. Responsibility

The customer is responsible for the actions of its authorised users and for keeping credentials secure.

Last updated: 16 May 2026.