Skip to content Request a project consultation

1 minute security check · 032 security check Administrator account authority

The post has been deleted, but the person who deleted it is not visible.

Approximately 4 minutes to read BlueCanvas

Can multiple people use the same administrator account?

You can write it down, but you won't be able to answer who did it after the accident. Even if you keep an activity record of what you did and when, there is only one space to identify a person, so if you have one account, the same value is always entered in that field.

Key takeaways

  • If multiple people share an administrator account, you can tell what changed and when it was changed, but who did it is just a single account name.
  • So, the confirmation stops at “Ask one by one”, and when you change the password, all users are blocked at once, so even that is postponed.
  • There is one confirmation to make today. See if there is a user list menu on the administrator screen, and if not, count how many people are currently using that account.

The post has been deleted, but the person who deleted it is not visible.

One notice has disappeared from the bulletin board. When you open the activity history on the administrator screen, it is written exactly what was changed and when. The problem is the space next to it. All five lines have the same name in place of the erased person. This is because one administrator account was being shared by the CEO, employees, and outsourced developers.

The records on the administrator screen usually consist of three columns. What you did, when you did it, and under which account you did it. The system fills in the first two fields automatically. There is only one last space to identify people, and if there is only one account, that field always contains the same value.

The idea of ​​dividing accounts was already mentioned in the beginning.

In companies with a few employees, this structure is usually created like this: The idea of ​​creating an account for each person comes up once in the beginning. However, it is faster to write it as one, so the agenda gets pushed back and becomes solid. Since nothing usually happens, there is no reason to bring it up again.

Confirmation stops at “Ask”

If an incident occurs, the only way to check is to ask the three in turn. If everyone says it's not them, it ends there. The only value left in the record is the account name, so there is no room to look back.

The password is also the same. If you change it because of one person, the person who used that account will They are all blocked together. So, even if a person leaves, the password is left unchangeable, and there is no list to even count how many people know the value.

What changes if you split your account?

First, let me make something clear. Separating accounts does not make accidents go away. What changes is after an accident occurs. The same incident is recorded differently.

same incidentOne public accountAfter dividing the account
03:41 Delete notice postadminstaff02
09:12 Change payment informationadminowner
14:05 Download attached fileadmindev01
If someone leavesIf you change your password, everyone who used it will be blocked, so you end up leaving it as is.All you have to do is suspend that person's account, and the rest can use it as usual.

The IDs and times in the table are examples for reproduction. This is not a value from an actual customer or our operating account.

but The extent to which activity records are kept and how permissions can be divided into levels vary depending on the tool being used. Even though each person can create an account, there are some screens where the account name is not added to the record, and there are also screens where permission levels cannot be divided. Before changing, check first on the administrator screen.

There is only one menu to check today

You don't need to change any settings. Open the administrator screen userme Administrator listJust look to see if there is a menu to add people like this. If there is no menu, there is only one account on that screen.

If not, continue counting. We count people who enter the account from the office, partners who come in from outside, and even people who are not present but whose value we know. If there are more than two people, it's time to arrange for splitting the account.

The order of division is as follows. Each person creates an account, and public accounts are locked the same day. Permission levels are divided into writing posts, viewing inquiries, and changing settings. The person who left must suspend the account rather than delete it so that the records left behind by that person remain. After a month, open the record again to see if the name sticks.

This is BlueCanvas’ one-minute security check. You can request to have your account and permissions organized through website/server control.

Full video subtitles (5 scenes)

The post was deleted, but I can't see the person who deleted it.

One notice has disappeared from the bulletin board. When I opened the record, the names of all deleted people were the same. Three people share one administrator account.

The idea of ​​sharing was already mentioned in the beginning.

The idea of ​​dividing the account first came up. It was faster to write it in one piece, so it hardened as is. All three of us had the same window open that day.

Confirmation stops at Ask

The only way to find out is to ask them in turn. If everyone says it's not them, it ends there. If I change my password, all three will be blocked at the same time, so I postpone that too.

It's the same incident, but the remaining lines are different.

If you divide the account, the same incident remains like this. The name will remain in the deleted space, and the account of the person who has left will be suspended. However, how much to record varies from tool to tool.

There is only one menu to check today

You just need to check one thing today. See if there is a user list menu on the administrator screen. If not, start by counting how many people are currently using that account.

Frequently Asked Questions

Can dividing accounts prevent accidents?

no. Separating accounts is not a way to eliminate accidents, but rather a way to make it possible to answer who did what after an accident. Access control, backup, and permission minimization are required separately.

How do I check if there is activity history on my admin screen as well?

Open the Activity History or Log menu on your administrator screen and see your account name appear next to what you did and when. The extent to which records are kept varies depending on the tool used, so if not, you should check with the provider.

Wouldn’t it be better to delete the account of the person who left?

If you delete it, the records left behind by that person may also become blurred. It is better to suspend the account, cut off access, and leave a record. First check with the tool you are using to see if it has a stop function.

We will take a look at organizing your accounts and permissions.

Let's start by checking how many accounts there are on the administrator screen and whether people's names are added to the records. You can apply through BlueCanvas website/server control.

View website/server control

Other short form insights

See all short form insights→