◈ ProtectZA · Members Administration
Restricted administration · MFA required · audited personal-data access

Members, applications and communications

Manage registrations and permissions, view data only with a recorded purpose, contact verified channels and process account-deletion requests. Ordinary members cannot access these controls.

Production gate: this area is not active until encryption, delivery provider, approved POPIA notice and real administrator authenticator credentials have been configured. Existing administrator sessions alone do not unlock personal records. Access decisions are logged.

Administrator authorization

Sign in through the existing admin, then supply your current time-based six-digit authenticator code for protected actions.

Not loaded

Invite a new member

Sends a one-time invitation code. The recipient must accept, set their password and acknowledge the privacy and purpose terms before the account activates.

Member directory

—

Email addresses and other personal details are intentionally absent from the directory. Each explicit access request requires a recorded reason.

Selected member

Select a member to manage.

No personal data accessed.

Change permissions

Member, support and reviewer labels can be managed here. These labels do not grant legacy administrator API access or supersede MFA controls.

Send a manual service message

Only use a verified, opted-in channel. Avoid sending details of diagnoses, bank numbers or claims in email/SMS/WhatsApp messages.

Delete member account

Destructive operation. A documented legal hold blocks deletion. Audit events remain minimised; encrypted records and member sessions are removed with the account. Backup and messaging-provider retention must be handled operationally.