Administrator Setup and Best Practices Guide
This operational setup guide outlines security protocols, user management procedures, and integration data-handling rules.
1. Information Security & Compliance
Dwellant operates under ISO 27001 accreditation, certified by the BSI. To maintain these security standards, all client administrators must adhere to the following communication and access protocols:
-
Managing Agent Security Managers:
System administrators automatically function as the primary security contacts.
Your details are held on record for security advisories, vulnerability updates, and incident alerts.
-
Incident Reporting Procedure:
If a potential data leak, breach, or credential exposure occurs, report it immediately to
customerservice@dwellant.com(Customer Care).Do not send incident reports to individual account managers. The centralised inbox ensures round-the-clock team triage, standard 24-hour SLA remediation, and logging in recurring security audit reviews.
-
Secure Data Transfer:
Never email spreadsheets or raw tenant/resident personal data over unencrypted email.
-
Use approved secure transfer methods:
Dwellant built-in encrypted chat
Microsoft SharePoint (authenticated folder access)
Google Shared Drive (restricted permission links)
2. User & Authentication Setup
Each staff member must have unique login credentials—account sharing is strictly prohibited.
1. Navigate to User Administration:
Log in with your administrator account. From the left-hand navigation pane, select Setup, then click Users and Groups > Users.
2. Determine Access Level:
Determine the appropriate administrative scope for the user:
- Managing Agent Level: Full portfolio oversight across all assigned properties (standard property managers, finance staff, central operations).
- Building Level: Scoped strictly to an individual property or site (concierge, front desk, or on-site building managers).
3. Input Account Credentials & Enforce Policy:
Click Add User, then input the staff member's corporate email address and name. Enforce standard password complexity rules (length, special characters, numerical requirements).
4. Assign Permissions Groups:
Assign the user to pre-configured permission groups (or a bespoke Custom Group) depending on whether they require invoice approvals, maintenance dispatch, or reporting access.
5. Configure Microsoft SSO (Recommended): Enforces automated deprovisioning.
Enable Microsoft Single Sign-On (Entra ID / Azure AD). Once activated, users authenticate exclusively via their corporate Microsoft credentials. When an employee departs and their corporate account is disabled, their Dwellant access terminates automatically.