> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Access management

> Give colleagues access, set what they can do, and check they are secured.

Everyone who works in your OutKept environment is managed from the **Members** page. That is
where you invite colleagues, remove people who no longer need access, and decide how much each
of them can do.

## Adding a member

Invite a colleague by entering their email address and assigning them a role. They receive an
invitation and set up their own login.

<Tip>
  Invite people with the lowest role that still lets them do their job. Someone who only reads
  the monthly numbers does not need the ability to change campaign settings.
</Tip>

## Removing a member

Remove access from the same list when somebody changes role or leaves the organisation.

<Warning>
  Removing a member removes their access to the platform. It does not remove them from your
  target list. That is managed separately under **Manage your data**.
</Warning>

## Permission levels

There are three roles.

| Role | What it allows |
| - | - |
| **Partner** | Everything an administrator can do, plus the partner features for managing multiple client organisations |
| **Administrator** | Full access to the organisation: settings, data, campaigns and results |
| **Viewer** | Can view statistics and results, but cannot change any settings |

**Viewer** is the right choice for most people who are given access. Managers, HR contacts and
anyone who needs the numbers for reporting can see everything they need without being able to
alter a running campaign.

<Warning>
  Any role can see the [personal impact statistics](/campaign-graphs), which show results per
  individual employee. This is the most sensitive data on the platform. Agree internally how
  individual results may be used before giving someone access.
</Warning>

## Checking SSO and 2FA

The Members page also shows, for each member, whether they have single sign-on and two-factor
authentication enabled.

| Column | What it tells you |
| - | - |
| SSO | Whether that member signs in through single sign-on |
| 2FA | Whether that member has two-factor authentication enabled |

This gives you a single place to confirm that everyone with access to your awareness programme
meets your own security requirements. Accounts with access to employee-level results are worth
holding to the standard you are training people towards.

<Tip>
  Worth a look whenever you add someone, and again periodically. A new member who has not yet
  enabled 2FA shows up here rather than going unnoticed.
</Tip>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.