Prepare worker access

Updated 2026-10-07

What to do

Keep manager accounts separate from field worker access on shared devices.

1. A manager creates a distinct worker record and private six-digit PIN for each field user. An employee code must not be the same as the PIN; do not put a PIN on a label or shared spreadsheet.
2. From an authorized manager session, enroll the shared field device. Enrollment signs the manager out of that browser so field actions are not accidentally attributed to the manager.
3. Have the worker sign in with their own PIN and check the displayed identity before scanning a tool. Use one controlled test handoff to confirm the device and worker can reach the correct company record.
4. Lock or switch workers between handoffs. If the wrong identity is shown, switch before recording the movement rather than trying to repair its attribution afterward.
5. If a PIN is rejected, stop guessing and ask a manager to check worker status or reset it. Repeated failed attempts can trigger a cooldown; a reset ends previous worker sessions.
6. When a shared device is lost or leaves service, ask a manager to revoke its enrollment. Deactivate workers who should no longer record handoffs while preserving their historical events.