Users, roles and invitations

Adding people to a Tallify practice: invited sign-ins with no temporary passwords, roles and adviser scope, office staff, adviser records and sessions.

Adding a person

In a practice set up since October 2026, Tallify is the only administrator and adds each person: the advisers and office staff named in Settings, Practice details, or an invitation from the Users view (Send invitation). Nobody is given a temporary password. The person gets an invitation email, signs in for the first time at /login/start with a code emailed to them, and chooses their own password. An invitation works for seven days and can be sent again. Someone removed from the practice has their sign-in closed in Users.

In a practice set up before invitations, an administrator creates the sign-in in Users with a temporary password, which the person must change at their first sign-in. It follows the same rules as any password: at least ten characters with a letter and a digit, not a common password, and not containing the username or the practice's name. Give it in person or by phone, never by email.

Roles and scope

Administrator, adviser, office staff and read-only. See Signing in for what each can do. Office staff see the books of the advisers ticked for them. The practice tables (advisers, products, prices, distributions, households) are changed by an administrator only. Office staff, paraplanners and compliance users are free on every plan (see Pricing).

Adviser records

Separate from the sign-in, each adviser has a record with name, email and mobile number. Email approvals are accepted only from a registered address, and drafts are emailed to it. Each adviser connects their own mailbox in Settings, Your setup.

Sessions

Each user can see their own sessions and sign out everywhere. Setting a new password for a user, or closing the sign-in, signs them out of every session.

A user who is locked out

Twenty failed sign-ins on one username within fifteen minutes block that username for fifteen minutes in any browser it has not signed in from before, and the user is emailed that it happened (see Signing in). A user who has forgotten their password asks Tallify, which resets the sign-in on the practice's server; that also lifts the block on the username.