Skip to content

Staff access

Staff Access decides who can sign in to Meddesk Console and which roles they hold. You need the System administrator permission. Open Configuration › Staff Access.

The list shows everyone who has a sign-in, with:

  • User: name and email,
  • Roles,
  • Status:
    • Pending first login: they haven’t replaced their temporary password yet,
    • Active: they can sign in,
    • Disabled: their sign-in has been switched off by the Meddesk platform team,
  • 2FA: Enabled or Not set up,
  • Created: when they were given access.

Use Search users… to find someone. Select a person to open their details.

  1. Select New user.
  2. Find the staff member with Search staff by name or email and select them. Only active staff members who don’t have a sign-in yet are listed. If everyone already has one, you see Every staff member already has a user account.
  3. Under Roles, tick the roles this person should hold. (Selected the wrong person? Select Change.)
  4. Select Create user.
  5. Meddesk shows User created with a temporary password. Select Copy and give it to the person securely.

The person signs in with their email and the temporary password, and must choose their own password straight away. See Your first sign-in.

Selecting a user shows:

  • their roles,
  • Last login (or Never signed in) and Last activity,
  • Access granted: the date they were given a sign-in,
  • Two-factor authentication: Enabled or Not set up,
  • their status, and Staff profile inactive if their staff profile has been deactivated (they can’t sign in while it is),
  • Current sessions: every device they’re signed in on.

The User actions menu has the actions below.

  1. Select Edit roles.
  2. Tick or untick roles.
  3. Select Save roles.

You see Roles updated. The change takes effect straight away.

Use this when someone forgot their password and can’t use the emailed reset link, or lost their temporary password.

  1. Select Reset password.
  2. Confirm with Yes, reset.
  3. Copy the new temporary password from the Password reset window. It’s shown only once. Then select Done.

Resetting signs the person out everywhere, and they must choose a new password the next time they sign in. You can’t reset your own password here. Use Account settings instead.

Use this when someone lost the phone with their authenticator app. It only appears when the person has two-factor authentication on.

  1. Select Reset 2FA.
  2. Confirm with Yes, reset.

You see Two-factor authentication reset. They sign in with just their password. If your clinic requires two-factor authentication, they’re asked to set it up again.

Under Current sessions, select Sign out next to a session. That device is signed out straight away.

  1. Select Delete.
  2. Confirm with Yes, delete.

You see User deleted. The person can no longer sign in and is signed out everywhere. Their staff profile is not affected, and you can give them a new sign-in later. You can’t delete your own user account here.