User Access & Account Security

Enable 2FA under Settings > Security Policy. Users will be required to verify their login using a time-based OTP (TOTP) app or SMS code before accessing administrative views.

Master accounts (Users) can assign a Company Owner role when creating or managing a company profile under Company Management, granting them full management rights over that branch.

Administrators or Company Owners can navigate to the employee’s profile under Employee Directory and assign a new RFID card serial number. The old card is instantly revoked, ensuring security at all entry gates.

Smart Office employs a multi-tenant architecture with strict Role-Based Access Control (RBAC). Attendance logs, employee profiles, and reports are strictly scoped to the respective Company ID, ensuring complete data privacy and preventing cross-company data leakage.