Getting Started: Creating a secondary account for administrators
Questions:
- How do I create a work or caseworker account?
- How do I assign permissions to my secondary account?
Description:
Imagine you're under stress, have an appointment and you realise that you left your laptop there... and you were still logged in as admin. In that time, anyone could have accessed your system and all the data and trade secrets in and around your business.
TYRIOS and the GDPR recommend that you do not use the admin account permanently for everyday use. We therefore recommend that administrators create an administrator account or work account that only has rights for everyday use.
This offers a further protective measure against data theft or data loss by unauthorised persons.
Solution:
Create group
To create user accounts and assign rights, you must be logged in. The first thing you should do is create a group. You do this first so that the user account created afterwards can be assigned to this group.
- Customer area
- User administration
- Create group
- open the user interface for creating groups in the customer area under User management
- Enter a name, e.g. "Work account" or "Administrator for xyz" or "Management"
- Optionally, you can add a description and a picture
- After saving, you will be taken to the group management overview
- Click on the cogwheel to assign rights to the group you have just created
- Use the checkboxes to select the rights that your work account will require
- Confirm your selection via the "Create rights" button
- Scroll up to "Defined rights" and check your settings
Attention
The "Create permissions" button appears twice. Make sure that you have clicked on the correct one.
The permissions listed depend on which TYRIOS package you are using. We are therefore unable to tell you explicitly at this point which rights you should give your second account. However, as a little food for thought, you can ask yourself "Do I really need this every day at work and how expensive will it be if something is done wrong here?".
For example, you should not necessarily set "Content management - Delete" (deletion of pages on the website) or "Voucher management - Delete vouchers". Accidental deletions can have serious consequences under certain circumstances.
Our tip
When assigning rights, we say:
As little as possible, as much as necessary!
Create a second account and assign it to the group
Now create your second account and assign it to the group you have just created. To do this, you need to go back to the customer area.
- Customer area
- User administration
- Create user
- open the user interface for creating a user in the customer area under User management
- Now you need to uncheck the box under "Guest user". This allows you to enter a password for your account
- Now fill in the fields. Please note, however, that you do not enter the same password for your second account as for your admin account!
- Under "Settings", you must now tick the box for the group you created previously
- When you are finished, click on "Save" at the bottom
Attention
Do not use the same password for your second account as for your admin account!
Tips and Tricks:
Our tip for secure passwords
To the right of the password field there is also an indicator that shows how secure your password is. For security, we recommend that a password has the following characteristics:
- Contains at least one capital letter
- Contains at least one lowercase letter
- Contains at least one number
- Contains at least one special character
- Consists of at least 8 characters