User Access in Sparkforge: Agency and Sub-Account Setup
Sparkforge lets you grant access at two levels: agency-wide (Settings > Team) or per sub-account (My Staff). Each user has a type, account assignments, and granular permissions, including Login As and multi-channel OTP for email changes.
Managing access across Sparkforge agency and sub-account levels keeps your data secure and gives staff exactly the access they need — nothing more.
Agency team management
Who it's for: agency owners and admins granting access across multiple client accounts.
How to access
- From the side nav in Agency View, go to Settings.
- Select Team.
What you can configure
- Add, edit, or delete users.
- Profile logo, first name, last name.
- Email (used as the login).
- Phone number, password.
- Permissions (see the agency permissions guide).
- User Type: Agency grants access to all client accounts; Account restricts access to selected accounts.
- Account assignment: which sub-accounts the user can access or receive notifications for.
Login As permission
Login As is permission-gated per admin. When Enable Login As is off for a user, the option is hidden. Manage it under Agency Settings > Team > Edit user > Roles & Permissions > User Management.
Sub-account team management
Who it's for: clients or team members inside a specific sub-account. Users added here are also visible in agency team management.
How to access
- Switch to the relevant sub-account.
- In the side nav, go to Settings.
- Click My Staff.
Same fields as agency team management. New sub-account users automatically get a personal booking calendar if the agency-level Preloaded Example Data setting is on under Settings > Company.
Permissions and roles
Roles and permission scopes control which parts of Sparkforge a user can access (marketing, settings, campaigns), what they can do (view, edit, delete), and which accounts those rights apply to.
Email change verification (multi-channel OTP)
Changing a login email is a sensitive update. Sparkforge supports multi-channel OTP so identity can be confirmed even if the existing email is no longer accessible.
Verification methods
- Email OTP
- Phone (SMS) OTP
- TOTP via authenticator app
Available methods depend on the user's verified 2FA setup.
When you change your own email
You're prompted to verify with another available 2FA method (SMS or authenticator app). If no other method is verified, you're prompted to set up an authenticator app first.
When an admin changes another user's email
The admin sees all available verification methods for that user (Email, SMS, and/or authenticator).
Best practices
- Least privilege: grant only the access a user needs. Avoid full agency access unless required.
- Use Account-type users for limited scope (a sales rep tied to one client).
- Track access changes for audits and troubleshooting.
- Review access on a regular cadence — prune permissions and remove users whose roles changed.
Frequently Asked Questions
What's the difference between Agency and Account user types?
If I add a user under My Staff in a sub-account, do they show up in agency team management?
Can I set different permission levels for different users?
How do I change someone's access if their role changes?
What if I can't access the email tied to my user account?
Was this article helpful?
Thanks for the feedback.