When a developer or marketer joins an agency, they need an account on every client site. When they leave, every one of those accounts must go. Doing it site by site is slow and one forgotten account is a security risk.
Agency Manager keeps your team in one place and applies it to your client sites:
- Define team members and teams (for example Developers or Marketing), each with the role it gets on client sites.
- Give access to one or many people on one, several or all sites, with a review of every change before anything is sent.
- Change roles, suspend, restore or remove accounts in bulk.
- Retire a member: every account is removed or suspended, and sites that do not answer are retried until it is done. Their content goes to an agency service account.
- See who has access to what in the access matrix, including accounts whose role was changed on the site and administrators not managed by the agency.
- Follow every change site by site, retry failures and read the tamper-evident activity log.
Each client site needs the companion plugin Nubocoder Agency Manager Client.
Security
- Every request to a client site is signed with a key pair dedicated to that site, is valid for five minutes and cannot be replayed. Responses are signed too.
- Site keys are encrypted in the database with the NBAM_ENCRYPTION_KEY constant.
- Client sites only let the agency change accounts it created; the site owner decides what the agency may do and can disconnect at any time.
- Removing access and granting administrator roles ask for your password again. The owner is emailed about critical actions.
- Dedicated capabilities, optional mandatory two-factor authentication and an emergency button that revokes every key.
Install the hub on a dedicated WordPress site with few plugins, not on the public website of the agency.
- Install and activate the plugin on the agency WordPress site.
- Add define( 'NBAM_ENCRYPTION_KEY', '...' ); to wp-config.php. Agency Manager → Settings shows a ready to copy line.
- In Agency Manager → Sites, add a client site and copy its connection key.
- On the client site, install Nubocoder Agency Manager Client and paste the key in Settings → Agency Connection.
- Create your teams and members, then give access.
For reliable background jobs, run WP-Cron from a server cron job and set DISABLE_WP_CRON.