Manage Team Members and Roles
Add staff to your MyMicroFinance workspace, assign Owner, Admin, and Employee roles, and understand exactly what applicants can and cannot see.
Everyone who signs in is either an applicant (a customer applying for loans) or a staff member. Staff carry one or more roles — Owner, Admin, Employee — that unlock the admin side of the app. This article covers adding members, managing roles, and what each audience sees.
Who Sees What#
| Area | Applicants | Staff |
|---|---|---|
| Dashboard | ✔ (applicant view) | ✔ (admin view) |
| My Applications / New Application | ✔ | — |
| Applicants, Review Queue | — | ✔ |
| WhatsApp (Inbox, Workflows, Templates, Broadcasts) | — | ✔ |
| Settings (Team, Employers, Automations, API Keys, Supported Applications) | — | ✔ |
| Profile & Security | ✔ | ✔ |
Anyone without staff access who tries an admin page is returned to their dashboard: "That area is only available to staff members."
The Members List#
Go to Settings → Team Members (also reachable as Members under Admin). Each member shows their avatar, full name, email address, and the roles they hold.
Adding a Member#
Select Add Member:
- Name — first and last name.
- Invite credentials — their email address and a temporary password. A strong 16-character password is generated for you (you can edit it).
- Role access — tick at least one of Owner, Admin, or Employee (Employee is pre-selected).
Select Add Member to create the account.
No invite email is sent — you share the email and temporary password with the new member yourself. They sign in with those credentials and change their password under Settings → Security.
Editing and Removing Members#
Open any member to:
- Update their details — name, email, phone.
- Change their roles — toggle Owner / Admin / Employee. Every member must keep at least one role; to fully revoke someone's access, remove them instead.
- Remove them — select Delete, confirm in the "Remove this member?" dialog, and their access is gone.
API Keys for Integrations#
If your systems need programmatic access — a website that submits applications, a reporting tool — create an API key instead of sharing a person's login. Go to Settings → API Keys:
- Create a key with a name, the scopes it may use, and (optionally) the IP addresses allowed to use it. The key value is shown once — store it securely.
- Rotate a key to issue a new secret with a grace period for the old one.
- Revoke a key the moment it's no longer needed.
Usage charts show requests per month across the tenant and per key over the last 30 days, so unusual activity stands out.