Support access

Sometimes the fastest way for support to fix your problem is to see your account exactly the way you see it. /admin/settings/support-access is where you allow that, on your terms. The Contractor Codex support team cannot sign in to your account unless you explicitly grant access on this page, and you can pull the plug at any moment.

What granting access actually does

While a grant is active, a member of the support team can sign in as a member of your org and see what that member sees, including your clients, contracts, and billing. Three guardrails are always on:

• You always know it's happening. A persistent banner shows across every page during a support session. It can't be hidden.
• Everything is logged. Every sign-in appears in the History section on this page, with the support person's email, who they signed in as, and start and end timestamps.
• It always expires. Every grant has a fixed end time. When it passes, access ends on its own with no action from you.

Granting access

You'll usually do this because support asked, mid-conversation, while helping you with something. In the Grant new access section:

1. Pick a duration: 1 hour (recommended for quick fixes), 24 hours, or 7 days. Choose the shortest window that fits the problem.
2. Optionally add a reason, like "Stripe Connect won't finish onboarding". It's for your own records and shows on the grant.
3. Click Grant Support Access.

That's it. Support can now sign in until the expiration, and the grant appears under Active grants with a live countdown.

Revoking access

Every active grant has a Revoke now button. Clicking it immediately stops any new support sign-ins on that grant, and any session in progress ends at its next request. Solved your problem early? Revoke early. There is no downside; support will ask again if they need another look.

The history

The bottom of the page keeps the complete record:

• Sign-ins by support: each session, who signed in, as whom, when it started, and when it ended.
• Past grants: every grant you've ever made, with whether it was revoked or simply expired.

Nothing here is ever deleted, so an audit question like "has anyone outside my team ever been in my account?" has a one-page answer.