This guide is for officers who want to give a member access, or who need to find out why a member can't log in. M2 and Connect share one username and one password. A member with an M2 role gets M2, and Connect if your organization uses it. A member with no M2 role gets Connect only, if your organization uses Connect. If it doesn't, that member can't log in.
Before you start
You need to open the member's full record. A shorter version of the record has no User Account card. If that's all you see, ask your parent group about your role.
Check where a member stands
- From the main menu, click Members/Contacts. If Search isn't listed, your role doesn't include member searches, so ask your parent group. If you see two Search items, click the one without the Legacy tag. Otherwise, click Search.
- Fill in Last Name, First Name, or Member Number, and click Find.
- Click the member's name in the results. The record opens in a new tab.
- Scroll down to the User Account card. It fills in a moment after the rest of the page.
The card shows one of four things.
| What you see | What it means |
|---|---|
| Username, Enabled, Last Activity, Last Login, Failed Attempts, and Management Roles | The member has an account. |
| The link Invite member to create account. | The member has no account yet and can have one. |
| "Member is eligible for an account but does not have a phone or email address to send invitation to." | The member can have an account, but their record needs a working email address or a phone number first. An email address marked invalid doesn't count. |
| None | The member can't have an account right now. |
If the member has an account, three lines tell you most of what you need. Enabled says Yes once the member clicks the link in their welcome message, and until then they can't log in. Management Roles lists the M2 roles the member holds today, or None. Last Login shows the date they last logged in, or Never.
Let a member have an account
A member can have an account when all three of these are true.
- Their member status is active.
- They have a current, active membership in a local group whose member type has Allow Connect Access turned on. Or they hold an office or an additional-user role that allows an account.
- Their record has an email address that isn't marked invalid, or a phone number.
Groupable staff control two of these rules. Which statuses count as active is set for your whole organization, and Allow Connect Access is set on each member type for your parent group. Contact support if a status counts as active when it shouldn't, or the other way around, or if a member type needs a different setting. If it's the member's own status that's wrong, record the life-cycle event that changes it, or ask your parent group's office.
Your parent group decides which offices and roles allow an account.
When all three are true, send the invitation. Invite a Member to Create an Account or Reset a Password has the steps.
Give a member M2 access
M2 access comes from a role. Roles come mainly from offices and from additional users.
From an office
Your parent group decides which offices come with a role. Local officers are usually recorded through a Certificate of Election. See Add Certificate Of Election (update Local Officers).
When a member holds one of those offices, Groupable gives them its role the next time it refreshes their roles. That happens when the member logs in. It also happens whenever someone else opens the member's full record, because the User Account card loads with it. So if the member has an account, you can give the role right away by opening their record yourself. Opening your own record doesn't refresh your roles.
For a local office, the local group has to be active. If the office requires its holder to be a member, the person also needs an active membership in that local group as a full member, or as an honorary member where the office allows it.
From the Additional Local Users card
Use this to give a role to someone who holds no office, or to someone who needs access before they take office, such as an incoming officer. From the main menu, click My Local, then click Local Info, and find the card with that name. Click the plus icon in its header to add someone. Add Additional Local Users (Subordinate Roles) in groupable|m2 has the steps.
Parent group, region, and district officers' pages have matching cards, titled Additional group users, Additional region users, and Additional district users.
An additional local user's role works only while the member's status is active and the local group is active. If the member also has a membership in that local group, it has to be active too. Group, region, and district additional users need only an active status.
Give a member Connect webmaster access
Some roles include Connect webmaster permission. Your parent group decides which. To give a member webmaster access, give them one of those roles through an office or an additional-users card, as described above. A member who has it sees Add a Page and Admin Dashboard in the Connect menu on the pages where they have that permission.
What a visitor sees in Connect
Someone who isn't logged in can open Connect items marked Public. On the login screen, Continue as Guest takes them there. Items meant for members need the visitor to log in, and items meant for one group's members need a member of that group to log in.
What takes access away
If a member's status stops being active, they can no longer log in to M2 or Connect, and the login screen says "Access denied". A member with more than one member record can still log in while at least one of them is active.
If an office ends or you remove an additional user, the M2 role goes away the next time Groupable refreshes the member's roles. The member keeps their account. If they have no other M2 role, they're left with Connect only, if your organization uses it.
Right now, a status change doesn't log out a member who is already logged in. It takes effect the next time they log in. Until then, the member stays logged in unless they log out, close their web browser, or go a month without using the site.
If a member can't log in
| The member sees | What it means | What to do |
|---|---|---|
| "Access denied" | The member has no member record with an active status. | Check the member's status on their record. |
| "This account is not enabled." | The member hasn't clicked the link in their welcome message. | Open the User Account card and click Resend Welcome Message. |
| "This account is locked." | Failed Attempts is above 5. | Click Send Password Reset. When the member picks a new password, the count goes back to 0. |
| "This user has no defined roles." | The member logged in, but has no M2 role and your organization doesn't use Connect. | Give the member a role. |
| "login invalid" | The username or password doesn't match. | See Reset Your Password When You Can't Log In. |
| "Your current password doesn't meet the 8-character minimum. Reset your password now." | The member typed the right password, but it's shorter than 8 characters, left over from an older system. | Nothing for you to do. The member types a new password twice on the Recover Your Password screen and clicks Reset Password. |