Users and roles

Everyone gets their own sign-in. Shared logins mean the activity log cannot tell you who did what, which is the whole point of having one.

Manage people in Settings → Users. Only the account owner can.

The four roles

Read only — sees everything, changes nothing. For a bookkeeper or an owner who wants visibility without touching anything.

Driver — takes vehicles in, adds charges, records pickups and photos. Cannot issue an invoice or take money.

Office manager — runs the billing side. Invoices, payments, write-offs, rates, payers, settings. This is the role most office staff need.

Owner — everything, plus adding and removing people, the activity log, the data export and the subscription.

Note that everyone sees everything. The roles limit what people can change, not what they can see.

Adding someone

Two ways.

Invite by email. They get a link, set their own password, and are verified as soon as they accept. The link expires after seven days.

Create the account yourself. WinchWorks gives you a temporary password to pass on. They must change it the first time they sign in.

Invites are the better option where possible — nobody has to read a password aloud.

When someone leaves

Disable their account. They cannot sign in, and everything they did stays attributed to them.

Do not delete people. Their name is on jobs, invoices and payments, and the record should stay readable. Disabling ends the access without erasing the history.

You can enable an account again if they come back.

Passwords

At least twelve characters. WinchWorks rejects common passwords and anything containing your email address. Length matters more than punctuation.

Changing a password signs out every other session on that account.

Anyone can change their own from the account menu. Owners can reset anyone's, which issues a temporary password the person must change at next sign-in.

Who did what

Owners can read the activity log in Settings → Activity: every change, who made it, when, and what it was before and after. Searchable.

This is what a shared login costs you, and why it is worth giving everyone their own.