People who work with your records need their own sign-in. Do not share one login. Separate accounts mean each person sees only what their role allows, and you can remove one person’s access without disrupting anyone else.
Send an invitation
Open your account menu in the top bar and choose Users.
Choose Invite user
You will be asked for an email address and a role.
Pick the role carefully
The role decides what this person can see and change. Read Roles and permissions before choosing, especially for anyone who should not see financial information. Send it
They receive an email with a link. They set their own password. You never see it.
Pending invitations
An invitation that has been sent but not yet accepted shows as pending on the Users page. From there you can resend it, which is the fix when someone says the link has expired or never arrived, or cancel it if you invited the wrong address.
An invitation link works once. If someone forwards theirs to a colleague, the colleague gets the account and the original person does not. Invite each person at their own address.
Changing someone’s role
Roles change. A board member becomes treasurer, a volunteer joins the office staff. Open the person on the Users page and change their role there. The change takes effect the next time they load a page.
Removing access
When someone leaves, remove their access from the Users page. This is the important one to do promptly, because their account can reach member contact details.
Removing a user removes their access to KehillaHQ. It does not remove them from your membership directory. Those are two different records: a user is someone who signs in to administer the system, a member is someone who belongs to your congregation. Many people are only one or the other.
Your own profile
Your account menu also has Profile, where you update your own name and password. Changing your password signs out your other sessions. 
