An open ring binder of card pockets lying flat, a blank card slotted into every pocket, with three cards standing proud of theirs and each marked with a ticked circle
Contacts3 min read

Manage who can log in to my website

The login list belongs beside the rest of your customer record. Ask Bernard who can open a named website and he reads the list without changing it. Ask him to invite, resend, remove or restore somebody and he quotes the exact site, action and addresses before you approve anything.

The prompt

Show me who can log in to [site name], then help me [invite / resend to / remove / restore] [name and email address].

Signed in, Get my prompt fills in your site for you. Otherwise press Copy and fill in the [bracketed] parts. First time? Connect your AI to bernard once: Use your own AI (opens in a new tab).

One person can be several things

An invited person appears in Contacts with the type User logins. That is added to what Bernard already knows; it does not replace it. The same person can stay a buyer, student and subscriber as well as a website login. There is one contact, not a duplicate for every relationship. Where do the people who buy, join or ask end up? shows how those contact types fit together.

User logins records history and classification. The status of the separate website grant is what decides whether the person can enter now:

  • Invited means they may enter but have not used a website link successfully yet.
  • Active means they have entered at least once and still may enter.
  • Revoked means the whole-site door refuses them.

Do not confuse invited with an operation that is pending. Invited is a person’s current login status. Pending means Bernard is still waiting for the edge or email work behind a change, so he has not called that change complete.

Invite and resend

Give Bernard the exact site and the names and addresses. He checks and tidies duplicate addresses, adds User logins to each existing contact, prepares the website grants and quotes the complete recipient list back to you. You approve that exact quote before the edge or email work starts. A large list is handled in separately approved batches, so one vague yes never covers addresses you were not shown.

An invitation goes through the exact site’s own ready sending address. If that sender is not ready, Bernard says so rather than using a shared fallback. A resend makes a fresh one-use link for the named person. Neither action reveals a password, link or other login secret in the conversation.

When a result is pending, the edge check or delivery is still taking effect. It is not proof that the website is ready or that an email was accepted. Bernard can read the person’s login record again before saying that a fresh invitation was accepted for sending. If the person still cannot find it, use I did not get my private website link.

Remove and restore

Removing a login revokes the grant for that site. It preserves the contact, their audience session, User logins history, orders, course enrolments and memberships. Keeping the audience session matters because the same person may still be a learner; removing the website grant must not sign them out of a course they still hold.

Restoring returns a revoked grant to invited and prepares a replacement invitation. It does not pretend the person has already entered again. As with a new invitation, Bernard quotes the site and address for approval first, then waits for the edge and the site’s sender.

Login is not marketing permission

Invitation mail is a practical way into a site, not permission to advertise. Adding User logins never grants marketing consent. An unsubscribe removes marketing mail but does not remove website access or block the transactional link needed to enter. In the other direction, revoking website access does not unsubscribe, delete or rewrite the person’s separate email-permission record. When do I need someone’s permission to email them? explains that record.

Questions people ask

Where do invited people appear?
They appear in Contacts with the type User logins. The live status beside their website grant says whether they are invited, active or revoked. Reading the list changes nothing; every invite, resend, removal or restore is quoted for your approval.
Does inviting somebody subscribe them to my emails?
No. A website invitation is transactional access, not marketing consent. Someone can unsubscribe from marketing and still receive the private link needed to enter a site you invited them to.
What does removing a login delete?
Nothing. It revokes that one whole-site grant. The contact, their User logins history, current audience session, orders, course enrolments and memberships are kept.
Can Bernard tell me the magic link or password?
No. There is no reusable website password, and the private link is never shown in chat. After you approve a resend, a fresh one-use link goes only to the person’s recorded address.

Next