Setting up your team: roles, two-factor and login alerts

Your White Label DSP is a business system: money, client data and campaigns. Set up team access properly on day one.

What the platform offers

From White Label DSP — Team and security: your team, their roles, two-factor login and login alerts. The admin panel adds user roles and permissions, audit logs and API keys (see Programmatic DSP).

Step by step

1. Invite each person separately. Never share one admin login — the Acceptable Use Policy forbids sharing logins, and audit logs only help if each action has a name.
2. Give the smallest role that works. Finance needs billing, support needs client accounts, sales may need only reports.
3. Turn on two-factor login. The Two-Factor Login plugin is included at no cost: authenticator apps, enforced per account, recovery codes.
4. Keep login alerts on, so a sign-in from a new place is noticed.
5. Store recovery codes somewhere safe and offline.

For larger teams

Single Sign-On ($990) lets your team and clients sign in with Google or Microsoft accounts, with roles kept and one place to remove access when someone leaves.

When someone leaves

Remove their user the same day, rotate any API keys they had, and check the audit log for recent changes.

Related: Account security · The admin and advertiser panels