Multi-user management

Invite team members as owners, managers, editors, or logistics agents so everyone gets their own login instead of sharing passwords.

Invite your team

Invite somebody by name and hand them the link. They choose their own password on it, so the person who sent the invite never sees it, and from then on they log in as themselves.

Each person carries one role, which decides which pages they can open. The invite link expires after seven days.

A screenshot of the users table, showing jo as the owner and sam as an editor, both active
Somebody invited as an editor sets their own password, and from then on has their own login and one role. (src)

Four roles

Running events often involves a team, so Chobble Tickets lets you invite team members with a 7-day expiring access link where each person gets their own account and session.

Owners have full access: events, calendar, users, settings, and logs. Managers can see events and the calendar, making them ideal for door staff or volunteers who need to check people in without accessing sensitive settings.

Editors are content-only accounts. They can write listings, groups, and your public site content, but they hold no decryption key, so attendee data is unreadable to them. This suits an SEO consultant or copywriter who works on your content and has no reason to see your bookings.

When you enable logistics, a fourth role becomes available. Agents see only the deliveries run sheet - their drop-offs and collections for today and tomorrow, with a done toggle for each leg. They cannot see events, attendees, settings, or logs. This is useful for drivers or crew who only need their day's jobs and should not see anything else.

Team members set their own password when they accept an invite. The invite is single-use, and the encryption keys are re-wrapped under the new password as part of joining, so the person who sent the invite never sees it.

The admin dashboard tracks activity per user so you can see who did what, and sessions expire after 24 hours with HttpOnly cookies for security.

Session management

View and manage active sessions from the admin panel, and if someone's access needs to be revoked you can do it immediately.

Read the config documentation for details on session management and user settings.