Creating and Managing an Admin User for the Admin Interface

Creating Admin Users in BAFTA Events is quick and can be actioned by any other Admin Users. There are no restrictions on the number of Admin Users that can be created and given access to the System. As soon as the account is generated then it is active and once you pass on the credentials to the new User they can use them to login.

There are a couple of external sites that can be used to improve the security of setting and sending passwords to other Users:

• Privnote: Privnote – Send notes that will self-destruct after being read – this site allows you to create a note that can only be read once and is then destroyed. It is an effective method of sending passwords by email.
• Strong Password Generator – Strong Password Generator | Create Random Passwords – there are a number of websites that will generate strong passwords and this is one example. It is important to use a strong password to make sure that data in the site is kept secure.

There are two main types of Users in Events:

• Bookers – Users who log into the Booker interface and book tickets to Events.
• Admins – Users who administer Events by creating, managing and analysing Events.

Admin Users are core to Events as, without them, there would be no one to manage the site or set up the Events. Admin Users can be given different User permissions:

Super User – Admin Users with this permission can create, edit, delete and manage Events across all Branches.

Finance User – Admin Users with the Finance permission can access certain reports and approve Credit requests.

SEO Manager – Admin Users with this permission can configure and update the SEO functionality.

Maintainer – Admin Users with this permission can access Design Controls and Special Configurations.

Note – When creating new Admin Users, consider what access to Events they require.

How to Create an Admin User

1. Log into the Admin Interface
2. Go to System>Admin Users
3. Click on the Add button
4. On the next page complete the following fields:
   • First name
   • Last name
   • Email
   • Branch
   • Time Zone
   • Password (use a strong password with more than 10 characters)
   • Confirm password
5. Select the Permissions to grant the respective User
6. Select whether to grant the User access to the Check-in App
7. Click on Save & Close to create the Admin User
8. Send the user the login details they need to access the site using a Privnote
   • Email
   • Password
   • Login URL

Note – Events does not send any notification to new Users. Admins must pass on login details outside of the System using a secure method.

Tip – Only Super Admin can assign/update permissions for another Admin User.

Resetting Admin Users’ Passwords

There is no functionality in Events for an Admin User to automatically reset their own password. This is for security reasons and prevents accounts from being compromised. If a User is unable to gain access, they can ask another Admin User to reset their password. To do this:

1. Log into the Admin Interface.
2. Go to System>Admin Users
3. Click Edit from the Actions menu next to the relevant User.
4. Update the Password fields:
   • Password (must be longer than 10 characters)
   • Confirm password
5. Click Save.

Note – Events does not send any notification to users. Admins must pass on login details outside of the system using a secure method.

Security Mechanisms

There are several security mechanisms within Events that help keep both the site and the accounts secure. Events has the facility to set up MFA (Multi-Factor Authentication) for all Admin Users. It is highly recommended to set up MFA for Admin Users, and you can find out how to enable MFA in the Multi-Factor Authentication Guide.

Events also has a disable Admin User function. Admins who have not logged in for 12 months will be automatically disabled. This function also allows for a future date to be set which will disable an Admin User’s account. This is helpful when temporary staff are given access for a period or if a permanent member of staff is leaving.

To set a disable date:

1. Log into the Admin Interface.
2. Go to System>Admin Users.
3. Click Edit next to the relevant user.
4. Specify a Disabled Date in the future.
5. Click Save & Close.

Note – Admin users who have had their account disabled can be reactivated by another admin user by removing the disabled date and setting the user to Active.