Team and roles
Short answer: StackTether has two roles, Admin and Tech, plus one primary admin per MSP. Admins manage the team, connections, AI access and the audit log; techs use the portal for their own account and connect AI apps. Everything about one person lives on their member page: open Team and click their email or Manage.
Roles
| Role | Can do |
|---|---|
| Tech | Sign in, see Home and Account, connect AI apps the MSP allows, use the PSA connections an admin turned on for them. |
| Admin | Everything a tech can, plus Team, Connections, AI access and Audit log. Admins also need vendor access turned on for themselves before their AI apps can read a PSA. |
| Primary admin | An admin that other admins cannot change, pause, sign out, reset or delete. Only they or StackTether support can. Usually the first admin who joined. |
The member page
From top to bottom: a header with role, status, whether 2FA is set up and last sign-in; Role and status; Sign-in; Vendor access; AI access (per-app switches); Connected AI apps; AI access pause; Travel override; Tools (coming soon); History; and Danger zone.
Common tasks
Change a role
- On the member page, under Role and status, choose Tech or Admin and click Save.
Every MSP must keep at least one active admin. The primary admin is emailed about every promotion.
Pause or resume a member
Click Pause access to cut access at once (they are signed out everywhere, AI apps included). Their vendor access switches are kept, so Resume access restores them.
Sign-in help
- Unlock sign-in appears when a member is locked after too many wrong passwords.
- Sign out everywhere ends every portal session and AI connection of that member.
- Send password reset signs them out everywhere, turns off all their vendor access until an admin turns it back on, and emails a reset link. You type a fresh 2FA code to confirm.
- Reset 2FA uses a code emailed to the member and a call back. See 2FA and account recovery.
Delete a user
In Danger zone, click Delete user, type the user's email address and a fresh 2FA code. Their account is deleted for good: they are signed out everywhere and cannot sign in again. The last admin cannot be deleted.
Hand off the primary admin role
- The primary admin opens Team, panel Primary admin.
- Choose the New primary admin (an active admin), type a code from your authenticator app and confirm.
If the primary admin is gone, StackTether support can change it after verification; the primary is emailed and can cancel a scheduled change. Contact support through the contact form.
Things admins cannot do to themselves
- Change their own role, pause or delete themselves: ask another admin.
- Reset their own 2FA: ask another admin. For their own password, use Forgot your password? on the sign-in page.
FAQ
"That member is your MSP's primary admin. Only they or Stacktether support can do this."
Other admins cannot act on the primary admin. Ask the primary admin, or contact support.
"Stacktether support paused this member."
Only support can resume them. Contact support.
Where is the history of changes?
Recent admin actions on Team shows the last 50 changes for the MSP; each member page has its own History.