Skip to main content

Account best practices 

Follow these best practices to keep your Talon.One account secure and to identify the person behind every action.

Your organization is responsible for managing access to its Talon.One account, including how users sign in and who has access.

These recommendations apply to all users of your organization.

Important

These best practices are critical when setting up user access to the support portal.

Create one user per person​

Invite each person as an individual user with their own email address. Don't share sign-in credentials between several people.

Sharing a user profile between several people causes the following issues:

  • You cannot identify who performed a specific action. The audit logs show the same user for every person sharing the profile. In case of fraud or misuse, you cannot identify the person responsible.
  • You cannot remove access for one person without removing it for everyone. When a person leaves your team, you have to change the password and share the new one with everyone else.
  • The risk of credential theft and account takeover increases with each person who knows the password.
Tip

To create users in bulk, set up single sign-on and invite users programmatically with the Invite user from identity provider endpoint.

Secure user sign-in​

In Account > Organization, use one of the following methods to secure how users sign in:

If you do not use single sign-on, ask users to follow these password rules:

Give users only the access they require​

In Account > Organization > Users and Roles, assign each user the role with the fewest permissions required for their work.

For example, give customer support agents a role created from the Customer support template instead of the Admin role. See Grant access.

To restrict which campaigns a user can access, add them to campaign access groups.

Review users regularly​

In Account > Organization > Users and Roles, regularly review the list of users of your organization and take the following actions:

  • Disable or delete a user profile immediately when a person leaves your organization or no longer requires access.
  • Check the Last sign-in column, to identify and remove users who no longer use the Campaign Manager.
  • Ensure each user's roles still match their responsibilities.
On this page