sidesheet

Change a role, remove someone or reset their authenticator

Change a person's role, reset their authenticator or remove them from your firm, which deletes their account.

Who can do this: admins

Admins manage the people in their firm from Members in Settings. Each person's row has their role, their authenticator status and the actions for them.

Steps

  1. Open the menu with your name in the top bar and choose Settings. As an admin, you start on Members.
  2. Find the person under People.

To change their role, pick Member or Admin in their role menu. The change saves at once and they get an email with their new role.

People on Members, with the role menu in a member's row.
People on Members, with the role menu in a member's row.

To reset their authenticator, choose Reset MFA, then Reset MFA again to confirm. This removes their authenticators and signs them out. They sign in with their usual method and set up a new authenticator. The button shows only for someone whose Authenticator is On.

A member's row asking to confirm Reset MFA, with Reset MFA and Cancel.
A member's row asking to confirm Reset MFA, with Reset MFA and Cancel.

To remove them, choose Remove, then Remove member. This deletes their account and signs them out.

A member's row asking to confirm the removal, with Remove member and Cancel.
A member's row asking to confirm the removal, with Remove member and Cancel.

Good to know

  • Removing someone deletes their account. It can't be undone. They get an email saying they've been removed and can no longer sign in.
  • The projects and returns they added stay with your firm.
  • To bring someone back, invite them again. They join as a new user.
  • Your own row shows "(you)" and has no actions. You can't change your own role or reset your own authenticator. Ask another admin. To remove yourself, leave the firm.
  • A firm always keeps at least one admin.
  • Everyone affected by a change gets an email about it.

If something goes wrong

  • "A firm needs at least one admin." That change would leave your firm without an admin. Make someone else an admin first.
  • "The change was saved, but the email didn't send." The new role is saved, but they weren't told. Let them know another way.
  • "was removed, but the email didn't send. Tell them another way." The person is removed, but the email to them failed. A reset that couldn't email them says "MFA was reset" instead.