What Happens When Admins Or Non-Admins (Tenants) Change Their Email Address?

This document explains the purpose of the security email sent to tenants (users) after they update their email address. The goal is to confirm that the change was made by the tenant themselves and not by someone else, to prevent unauthorized access.

Admin Vs Non-admin Tenants:

Admins have the authority to access the accounts of other admins and non-admins.

Non-admins can only view and manage their own account and perform tasks related to it.

How to Change Your Email Address

When an admin or non-admin updates their email address, a confirmation email is sent to their current (existing) email address. This email contains a confirmation link that expires after 24 hours. If the tenant clicks the link within that time, the email address will be successfully updated.

After the email address is successfully updated, a notification email is sent to the old (previous) email address to inform the tenant of the change.

The confirmation link sent to the tenant expires after 24 hours.

If the tenant updates their email address and then changes it again before clicking the confirmation link from the first attempt, the original link will automatically become invalid. Only the latest confirmation link will remain active.

If an admin changes the email address of another admin or non-admin, no confirmation email will be sent. In this case, the email address will be updated without notifying the tenant.

Email address change is agency-specific.

Example

For example, we have a tenant who has two separate accounts under two different agencies. Agency 1 and Agency 2 with the same email, [email protected].

If the tenant decides to change the email address for Agency 1, the new email address will only apply to the account in Agency 1.

Tenant in Agency 2 will still use the old email address unless the tenant updates it there separately.

Tenant Email Address Change Workflow