---
title: Back Office for your staff
description: How staff connect, what they can do, and the settings that keep it safe.
url: "https://plugmindstudio.com/docs/whmcs/back-office/back-office-for-staff/"
updated: "2026-11-06"
category: Back Office
---

# Back Office for your staff

## Connecting

1. Staff install **Back Office by Plugmind** and enter your WHMCS's address (shown on the add-on's **Back Office** tab).
2. They sign in to WHMCS as they usually do, with two-factor if they use it.
3. They allow the device.

The app never sees a password. Each device gets its own token, and staff only ever see and do what their admin role allows. Every action is logged in WHMCS's activity log under their name.

## What they can do

- **Orders:** accept, cancel or mark as fraud, each with a confirmation that says exactly what will happen.
- **Invoices:** see unpaid and overdue invoices, and chase them.
- **Services:** suspend and unsuspend. Terminating stays off unless you switch it on.
- **Tickets:** reply, add notes, and change status or department.
- **Notifications:** new orders, payments, ticket replies and failed provisioning.

## Settings (Back Office tab)

- Whether staff may **terminate services** from the app. Off unless you switch it on, and then it needs a typed confirmation.
- Whether the app must be **unlocked** with Face ID, a fingerprint, Windows Hello or the device's passcode.

## Devices

The **Devices** tab lists every signed-in phone and computer, with **Send a test** for notifications and **Check the relay** to see that notifications can be sent. Devices unused for 30 days sign out by themselves.