Team members and roles
Give each person their own login, and decide what they can change.
5 min read ·
Owner and staff
The agency owner manages everything, including settings, billing and the team. Staff members handle the daily work: bookings, contracts, payments and returns.
- Manager: full access, including the Team page, the website and the billing; only the owner can save the agency's Settings.
- Counter staff: bookings, contracts, returns and the cash journal.
- The owner's account keeps its role and cannot be deactivated.
Add a staff member
In Team, add the person's name, email and a first password. Ask them to change it when they first sign in.
Choose Add a staff account and pick the role. If you leave the password empty, Rentoth creates one and shows it to you once: write it down and hand it to the person, who can change it in their own settings.
Logins and passwords
The Team page shows how many logins are in use, and each person's last sign-in. Reset password gives someone a new password; the old one stops working at once and they are signed out everywhere.
Two-step sign-in
Each person can turn on two-step sign-in in Settings: scan the QR code with an authenticator app (Google Authenticator, Microsoft Authenticator, Aegis…), then enter the 6-digit code it shows. From then on, signing in asks for the password, then a code from the app.
- Keep the 10 recovery codes shown once: each one works once, if the phone is not at hand.
- Turning it off asks for the password and a code.
- An email warns the person when it is turned on, off or reset, and after several wrong codes.
Require it for the whole team
On the Team page, a manager who has turned on their own two-step sign-in can require it for everyone. A member without it then sees a screen asking them to finish setting up their account, and none of the agency's data, until they turn it on. Each login on the Team page shows whether two-step sign-in is on.
Lost phone
A manager resets the person's two-step sign-in from the Team page. The person is signed out everywhere, gets an email, and signs in again with their password; if the agency requires two-step sign-in, they set it up again. The owner's account is reset by our team.
When someone leaves
Deactivate their login in Team. Their past work stays in the history, and they can no longer sign in.
Deactivating frees their login for someone else. Reactivate the account if the person comes back.
Next guide
GPS tracking