Nubocoder Agency Manager

When a developer or marketer joins an agency, they need an account on every client site. When they leave, every one of those accounts must go. Doing it site by site is slow and one forgotten account is a security risk.

Agency Manager keeps your team in one place and applies it to your client sites:

• Define team members and teams (for example Developers or Marketing), each with the role it gets on client sites.
• Give access to one or many people on one, several or all sites, with a review of every change before anything is sent.
• Change roles, suspend, restore or remove accounts in bulk.
• Retire a member: every account is removed or suspended, and sites that do not answer are retried for about a week. Their content goes to an agency service account.
• See who has access to what in the access matrix, including accounts whose role was changed on the site and administrators not managed by the agency.
• Follow every change site by site, with the attempts made and a possible fix for each failure, retry failures and read the tamper-evident activity log.
• Get one email when changes could not be completed or a site keeps failing its daily check, plus a notice and a counter in the WordPress admin.

Each client site needs the companion plugin Nubocoder Agency Manager Client .

Full documentation: cesarsiancas.com/plugins/nubocoder-agency-manager .

Security

• Every request to a client site is signed with a key pair dedicated to that site, is valid for five minutes and cannot be replayed. Responses are signed too.
• Site keys are encrypted in the database with the NBAM_ENCRYPTION_KEY constant.
• Client sites only let the agency change accounts it created; the site owner decides what the agency may do and can disconnect at any time.
• Removing access, restoring accounts and granting administrator roles ask for your password again. The owner is emailed about critical actions, and security alerts are always emailed.