The right people, with the right keys
Access in Intersink follows the way you actually work: one User ID for each person, roles in each business, and roles again in each channel. Nobody shares a password, and every change to who can do what is written to the audit log.
Three layers, each with its own doors
A person signs in once. What they can open after that depends on the business and the channel.
How you sign in: passkeys, 2-step verification, devices and alerts. It stays yours if you leave a business.
The legal entity. Holds the team, billing, payout accounts, documents, sign-in rules and the audit log.
Its own principals and roles: Owner, Admin, Editor, Sales, Support, Viewer, or roles you create.
Each app’s settings choose which channel roles may use it.
Its own principals and roles: Owner, Admin, Editor, Sales, Support, Viewer, or roles you create.
Each app’s settings choose which channel roles may use it.
Users and business roles
The Users page in a business lists everyone with access to it and its channels, the role each person has and which channels they can reach. Invite someone by email address with Invite user. They join with their own User ID, so you never share a password.
Invitations expire after 14 days, and you can resend or cancel one from the users list. Give the smallest role that lets someone do their job; roles can be widened later.
| Business role | Typical use |
|---|---|
| Owner | Full access. The only role that can close or transfer the business. |
| Admin | Manages users, roles and invitations, creates channels, and sees and changes billing and settings. |
| Accountant | Sees billing only. |
| Member | Works in the channels they are added to. Cannot see billing or payouts. |
Permissions for each channel
Each channel has its own Permissions page, viewed by Principals or by Roles. A principal is a person or a service account. Add one by email with Add Principal; they must already have a User ID. Removing a principal takes away their access to that channel immediately, and changes take effect at their next page load.
The Roles page is a grid of every role against every permission. Tick to allow, untick to remove, or create a role of your own. The Owner role always keeps full access and cannot be edited, so there is always one way back in.
| Channel role | What it can do |
|---|---|
| Owner | Full access to everything |
| Admin | Manage users, settings and all modules |
| Editor | Create and edit content, catalog and pages |
| Sales | Leads, contacts, orders and tickets |
| Support | Tickets and contacts |
| Viewer | Read-only access |
A record nobody can rewrite
Every action that changed money, access or settings in a business: who did it, when, and from where. The log cannot be edited or deleted by anyone, including the owner and our own support team.
| Kind | Always logged |
|---|---|
| Money | Payouts, payroll locks, bill approvals, payout account changes and auto-pay limit changes. |
| Access | Invitations, role changes, removals and ownership transfer. |
| Data | Exports, bulk downloads, and opening an employee or patient record. |
| Settings | Anything that changes billing, security or public content. |
| Support | Reviews and verification steps Intersink staff take on your business, such as checking its documents. |
Make strong sign-in compulsory
Access control only works if the person signing in is who they say they are. Owners can require 2-step verification, allow or refuse text message codes, limit admins to approved IP addresses and sign people out after a period of inactivity.