Who can use what.
THE PRINCIPLE
Each person who uses it should have their own access, not a shared login.
WHY
Actions should be attributable. Shared credentials remove that.
Access can be removed for one person without affecting everyone.
WHAT TO SET UP
Individual access for each team member Removal when someone leaves Any restrictions your business requires
SECURITY
Strong unique passwords Additional verification where available Removing access promptly when someone leaves
That last one is the most commonly neglected.
WHAT TO RECORD
Who has access, and to what.
Review it periodically. Most businesses discover access they forgot about.
FOR RESTRICTED ENVIRONMENTS
Where available, access can be limited by network address so the platform is reachable only from your premises.
Useful where that matters to you.
IF YOU NEED HELP
Open a ticket and describe what you want to achieve.
