Users & invites
34 active · MFA 100% · super-admins on hardware keys · dormant auto-suspend at 45 days
| Person | Role | MFA | Sessions | Last active | Status |
|---|---|---|---|---|---|
Dan Whitlam CTO · sponsor: board | super-admin | hardware key | 2 · MacBook + workstation | now | active |
Priya Shah Head of Retail | retail-admin | SMS + passkey | 1 · iPad | 8:02pm today | active |
Maya Chen Catalogue lead | catalogue-editor | passkey | 1 | 6:40pm today | active |
Alex Reyes Support · chat | support-agent | TOTP | 1 | 8:21pm today (T-4408) | active |
Sam Tran Support · email | support-agent | TOTP | 1 | 7:12pm today | active |
R. Feld Fraud desk | fraud-reviewer | hardware key | 1 | 7:55pm today (08402) | active |
H. Marsh Counsel | counsel | hardware key | 1 | 4:30pm today | active |
J. Okafor (contractor) catalogue burst · ended 5 Sep | catalogue-editor | TOTP | 0 | 9 Sep · login blocked | suspended · alerted |
Invite queue
n.chen@… (finance analyst)expires in 41h
role finance-viewer · sponsor CFO · sent 10 Sep
t.bray@… (support, starts Mon)expires in 3d
role support-agent · sponsor CX lead · MFA enrolment forced at first login
k.dutt@… (campaign editor)accepted · pending first login
role campaign-editor · sponsor Priya
Invites carry the role, the sponsor and a 72h fuse — no open-ended "admin" links ever leave the building.
Session & device posture
- Sessions live
- 41 across 34 humans
- Idle timeout
- 30 min admin · 10 min super-admin
- Device trust
- managed fleet only for super-admin + fraud
- Impossible travel
- 1 flag/90d · resolved (VPN, documented)
- Break-glass seal
- intact · checked daily 5:00am
- Suspended
- 2 (contractor ended, leaver 28 Aug)
9 Sep 9:14pm: suspended contractor token replayed from a new device — blocked at edge, page sent to Dan + counsel, token family rotated. That's the leaver SLA earning its keep.