People
Everyone signs in with their own username or email, so the audit trail shows who did what. The site never shows or sends a password: each person sets their own from a one-time link.
First, make your own sign-in
You signed in with OWNER_PASSWORD, the secret you keep in Cloudflare. Make your own sign-in now: your name, a short username, an optional email and a password only you know. Everything you do from then on is recorded under your name, and you can give each person their own sign-in below.
After this, OWNER_PASSWORD no longer signs in. It stays your way back: if you ever lose your password, the Recover page (/recover) sets a new one with OWNER_PASSWORD. Nothing else changes: uploads, reports, downloads, backups, the copies, the workbooks, the API keys and the staff password all keep working.
You are signed in with a shared password
My sign-in
Changing it ends every other sign-in of yours; this one carries on.
Owner multi-factor authentication
In your authenticator app, add an account with this secret:
Issuer: UNICORP Procurement · 6 digits · SHA-1 · every 30 seconds.
Save these recovery codes now
Each code works once. They cannot be shown again.
Customer-name retention
Ends every sign-in of yours, on every computer and phone, this one too. Use it if your password may have been seen or a phone was lost.
The shared staff password
Leave it on while you hand out invite links, so nobody is locked out in the middle of the day. Once every staff member signs in with their own name, tick it: the shared password (PORTAL_PASSWORD) then signs nobody in, and anyone still signed in with it is signed out within a couple of minutes. Untick it to switch it back on. API keys, the workbook key and the workbooks are not affected.
0 account(s) need access
These people can sign in, but they cannot see procurement data or open a business module. They stay at the top of Everyone until you assign a permission template or checklist.
Password-help requests
New accounts appear directly in Everyone with no module access. Confirm password-help requests with the person before making a reset link.
| Request | Person | Received | |
|---|---|---|---|
| Reading... | |||
Add a person
Everyone who signs in
| Name | Username | May | Status | Last signed in | |
|---|---|---|---|---|---|
| Reading... | |||||
Changing a permission checklist, switching a person off, making a new link, or pressing Sign out ends their existing sessions at once.
Edit access
The server enforces this checklist on every request. Owner administration, API keys, restores and permanent deletion cannot be delegated here.