Support Center

Managing Platform Admin Access

As a Super Admin, you have the ability to invite new platform administrators, manage your team, and revoke access when needed. This guide walks through every step of the admin provisioning workflow.

IMPORTANT

Only Super Admins can invite or revoke other administrators. If you're an Admin or Viewer, you can see the Team tab but cannot take these actions.

Viewing Your Team

All platform admins — regardless of role — can view the full list of current administrators:

  1. Navigate to The Tower by clicking the Tower link in the sidebar or top navigation
  2. Click the Team tab in the tab bar
  3. You'll see a card grid showing every active platform admin

Each card displays:

  • Avatar with the admin's initials
  • Name and email address
  • Role badge — Super Admin (gold), Admin (purple), or Viewer (grey)
  • Granted date — when their access was provisioned
  • Granted by — the Super Admin who invited them, or "Seeded admin" for original system administrators
  • "You" badge — appears on your own card so you can easily spot yourself

Inviting a New Admin

WARNING

Admin invitations are restricted to @mallnline.com email addresses only. This is enforced at the platform level and cannot be bypassed.

Step-by-Step

  1. Open The Tower and switch to the Team tab
  2. Click the Invite Admin button (top-right of the Team panel)
  3. In the modal that appears:
    • Enter the invitee's @mallnline.com email address
    • Select the role from the dropdown:
      • Admin — full dashboard access, can view and manage all Tower features
      • Viewer — read-only access, can see all data but cannot make changes
  4. Click Send Invite
  5. A success message will appear with confirmation

The invitee will receive access via a special link. Invite links are valid for 72 hours — after that, you'll need to send a new one.

What Happens Next

The invitee needs to:

  1. Sign into Mallnline with their @mallnline.com account
  2. Open the invite link (which goes to /tower/accept-invite)
  3. Review the invitation details — their assigned role and who invited them
  4. Click Accept Invitation
  5. Their profile is instantly updated with platform admin privileges, and they'll be redirected to The Tower

TIP

After accepting an invite, the new admin's session is automatically refreshed so The Tower link appears in their navigation immediately — no sign-out required.

Understanding Roles

Capability Super Admin Admin Viewer
View Tower dashboard ✅ ✅ ✅
View all analytics ✅ ✅ ✅
View user listing ✅ ✅ ✅
View Team tab ✅ ✅ ✅
Search configuration ✅ ✅ ❌
Template management ✅ ✅ ❌
Invite admins ✅ ❌ ❌
Revoke admins ✅ ❌ ❌

NOTE

Roles cannot be escalated. An Admin cannot promote themselves to Super Admin, and a Viewer cannot grant themselves Admin privileges.

Revoking Admin Access

If someone no longer needs platform admin access, Super Admins can revoke it:

  1. Open the Team tab in The Tower
  2. Find the admin card for the person you want to remove
  3. Click the red Revoke button on their card
  4. Confirm the action

After revocation:

  • The person immediately loses access to The Tower
  • The Tower link disappears from their navigation
  • Their regular Mallnline account, Malet ownership, and Organization memberships are not affected
  • The revocation is recorded with a timestamp for audit purposes

CAUTION

You cannot revoke your own admin access. This safety measure prevents accidental lockouts. If you need your own access removed, ask another Super Admin to revoke it.

Invite Troubleshooting

"Email domain not allowed"

Only @mallnline.com emails can receive admin invitations. Double-check the email address doesn't contain typos.

"User is already a platform admin"

The person you're trying to invite already has active admin access. Check the Team tab to see their current role.

"Pending invite already exists"

There's already an unexpired invite for this email. Wait for it to expire (72 hours) or ask the invitee to use the existing link.

Invitee sees "Your account email does not match the invite email"

The invitee is signed into Mallnline with a different email than the one the invite was sent to. They need to sign out, sign back in with the correct @mallnline.com account, and try the link again.

Invitee sees "This invitation has expired"

Invite links expire after 72 hours. Send a new invite from the Team tab.

Invitee sees "This invitation has already been accepted"

The same invite link can only be used once. If the invitee still doesn't have access, check if they're signed in with the wrong account.