Introduction
Revoking administrator access demotes a user from Organization Admin back to a regular Organization Member (staff). This security-sensitive action requires OTP (One-Time Password) verification to protect your organization.
Before You Start
- Required Permission: You must be an Organization Administrator or System User to revoke administrator access
- Restrictions: You cannot demote yourself, and you cannot demote disabled users
- Verification Required: You must have a verified email address or mobile number to receive the OTP code
Steps
-
From the left-hand menu, click My Organisation
-
Select the Members tab to view all organization members
-
Locate the administrator you want to demote in the members table. Their role will show as "Admin" in the Role column
-
Click the dropdown menu button (⋮) on the far right of that user's row
-
Select Demote from Organization Admin from the context menu
-
A confirmation dialog appears with the title "Confirm Demotion from Organization Admin". Review the message: "Are you sure you want to Demote [Name] to a Organization Member?"
-
Click Yes to proceed (or Cancel to abort)
-
The "OTP Verification" dialog appears. A verification code has been automatically sent to your verified email address and/or mobile number
-
Check your email or text messages for the verification code (6 digits for SMS, 7 characters for email starting with 'e')
-
Enter the verification code in the input field
-
Click Verify Code to complete the demotion
-
The dialog closes, and the members list refreshes. The user's role now displays as "Staff" in the Role column
Tips
- Pasting codes: You can paste OTP codes directly into the verification field - if the code is complete, it will auto-submit
- Resend if needed: If you don't receive the code, click Resend OTP (available after a 30-second countdown)
- Multiple contacts: If you have both email and mobile verified, you can use the code from either one
- Audit trail: This action is automatically logged in your organization's audit log for compliance purposes
- Invalid code: If you enter an incorrect code, you'll see a validation error and can try again
Related Features
- How to Make a User an Administrator: The reverse process - promoting a staff member to Organization Admin
- How to Disable a User Account: Completely disable access rather than just changing the role
- How to Manage Organization Members: Overview of all member management capabilities