> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.hodi.host/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How do I give a user access to my account and manage their permissions?

At Hodi, we've made the choice to **protect your account and your data**. For this reason, **our teams can only respond to people who are officially registered** as users on your client area.

In practical terms, if a developer, a service provider, or a colleague needs to contact us or access your services, they must first be added as a user on your account.

**Good news:** this is very simple to do, in just a few clicks, and without ever sharing your password - **each person has their own access**, with permissions that you define yourself.

This system lets you:

* keep **full control** over your account,
* know **who has access to what**,
* be able to **remove access at any time**, for example if you change service providers,
* **restrict access to certain services or domains** only, if needed.
You can also use this system to give specific access to your accounting department, so they can view and retrieve invoices independently.

## How do I do this?

* Log in to your [Client Area](https://hodi.host/clientarea.php)
* In the "**My account**" menu, choose "**User management**"
* Click "**Invite a user**"
* Enter the email address of the person to invite
* Click "**Choose Permissions**" and select the options you want (see the examples below)
* Click "**Send your invitation**"
* The invited person will receive an email to access your services

## Which permissions should I grant? A few examples

The labels below are the ones shown in the "**Choose Permissions**" list. When in doubt, grant the minimum: you can always add more later.

**Accountant or accounting department**

* View & Pay Invoices

That's all. They can view, download and pay invoices without seeing your services or credentials. If your accountant doesn't need to log in, you can also [send invoices to them automatically](https://help.hodi.host/en/article/how-do-i-automatically-send-my-invoices-to-my-accounting-department-g9bq0n/).

**Developer, web agency or freelancer**

* View Products & Services
* Perform Single Sign-On
* View Domains
* Manage Domain Settings
* View & Open Support Tickets

They can open cPanel in one click without ever knowing the password, manage the DNS records of your domains and open a ticket on your behalf. They see no invoices, no orders and no profile. If you have several sites, add a domain restriction (see below) so they only see the ones they work on.

**DNS provider, SEO or email marketing agency**

* View Domains
* Manage Domain Settings
* View & Open Support Tickets

They can change nameservers and DNS records (SPF, DKIM, domain verification) without any access to your hosting.

**Administrative assistant or office manager**

* View & Pay Invoices
* View & Accept Quotes
* View Emails
* View & Manage Contacts

They handle billing, approve quotes and can find the emails Hodi sent, without touching technical services.

**Business partner or co-director**

* All Permissions

Reserve this for people who can commit the company: "Place New Orders/Upgrades/Cancellations" allows buying and cancelling, and "Modify Master Account Profile" allows changing the account's email address.

**Keep in mind**

* "View Products & Services" is required for "Perform Single Sign-On" to be of any use.
* "View & Open Support Tickets" is the permission that lets the person talk to our team.
* Only the account owner can invite users and change their permissions.

## Restricting access to specific services and domains
By default, an invited user can see **all the services and domains** on your account (within the limits of their permissions). If you'd like them to only see certain services or domains, you can enable a **domain-based restriction**.

To do this:

* Go to the "**User management**" page
* Next to the user in question, click the **globe** icon
* Choose "**Selection**" and check only the domains the user should have access to
* Click "**Save**"
The restricted user will now only see the services and domains you've authorized. A "**Restricted**" badge will appear next to their name to remind you that a restriction is active.

To go back to full access, reopen the window and choose "**All services and domains**".

## Security and traceability
All access is **logged** by Hodi for security reasons. If needed, we're able to identify **who logged in and when**.

If you change developer or service provider, you can **revoke existing access in just a few clicks** and create new access, with no impact on your main account.