Team and customer accounts

There are two kinds of account:

• Staff can sign in to the admin panel and change everything in it: questions, prices, rules, settings and quotes.
• Customers can sign in to /account to see the quotes they’ve submitted. They never see the admin panel.

Customers don’t need an account to get a quote. Anyone with your link can build and submit one. Accounts are for repeat customers, such as builders and contractors, who want their quote history in one place.

Invite someone

Go to Invites and click New invite. Enter their Email and choose the Role:

• Customer (end user)
• Staff (admin access)

They get an email with a one-time link to set a password. After you send an invite, the link is also shown once on screen, with a Copy link button, in case the email ends up in spam.

The Invites list shows each invite’s status: Pending, Accepted, Revoked or Expired. Use Resend invite if it expired or got lost. Use Revoke invite if you sent it to the wrong person.

Manage staff

Team lists everyone with admin access, and when each person last signed in. Click Edit user to:

• Change their username or email.
• Set a new password for them. Leave it blank to keep their current one.
• Turn off Staff access to remove their admin access without deleting the account.
• Turn off Active to stop them signing in at all.

When someone leaves, turn off Active rather than deleting them. Their name stays on the history and activity entries they created.

Manage customers

Customers lists customer accounts with when they joined and last signed in. Search by email. Delete customer removes the account. Their submitted quotes stay in your Quotes list.

A customer’s quotes show up under their account when they submit while signed in.

Passwords and security

• Staff sign-in has two steps. After the password, ConfigBid emails a 6-digit code to the staff member’s address, and they enter it to finish signing in. Codes expire after 10 minutes. Every staff account needs a working email address, or it can’t sign in.
• If a sign-in code arrives that you didn’t ask for, someone has your password: change it right away and tell your team.
• Anyone can reset a forgotten password from the sign-in page. ConfigBid emails them a reset link.
• Passwords that are too easy to guess are rejected.
• Sessions sign out after 2 hours of inactivity, and after 24 hours regardless of activity.
• Repeated failed sign-ins from the same place are slowed down to stop password guessing.