Staff/admin accounts, login codes and 2FA

Creating user accounts the right way

• Add ordinary members through the club member form, not the system-admin area.
• To give an existing member an admin role, promote their existing record by adding the role — do not create a second account.
• Multiple email addresses can be linked to a single user, which helps avoid duplicate personal accounts.

Login codes not arriving by email

If a new staff account never receives its authentication codes despite the address and password being correct, the recipient’s email provider is likely blocking the messages. The reliable fix is to switch that user to an authenticator app instead of email codes.

Enabling an authenticator for an administrator

Two-factor authentication cannot be disabled for administrator accounts, which means an admin who cannot receive codes is locked out of changing their own 2FA method. The workaround:

1. Temporarily remove the user’s admin roles (their account drops back to a standard user).
2. Have the user log in and set up an authenticator app as their 2FA method.
3. Reapply the admin roles.