From e09f3e29b2cd16b26eed25231220da902166469c Mon Sep 17 00:00:00 2001 From: kadiealexander <59587260+kadiealexander@users.noreply.github.com> Date: Wed, 30 Apr 2025 19:44:19 +1200 Subject: [PATCH 1/4] Create Locked Account Tool articles --- .../settings/Locked-Account-Tool.md | 81 +++++++++++++++++++ 1 file changed, 81 insertions(+) create mode 100644 docs/articles/expensify-classic/settings/Locked-Account-Tool.md diff --git a/docs/articles/expensify-classic/settings/Locked-Account-Tool.md b/docs/articles/expensify-classic/settings/Locked-Account-Tool.md new file mode 100644 index 000000000000..197eb54c6c5e --- /dev/null +++ b/docs/articles/expensify-classic/settings/Locked-Account-Tool.md @@ -0,0 +1,81 @@ +--- +title: Locked Account Tool +description: Understand how the locked account tool works in Expensify Classic, what features it restricts, and how to request an unlock. +keywords: [locked account, Expensify Classic, domain admin, secondary login, reimbursements blocked, card locked, unlock account] +--- +
+ +The locked account tool prevents high-risk actions from being taken on accounts that may have been compromised. It safeguards payment activity, contact methods, and account access. + +--- + +## When is it appropriate to click the button for your own account or for your employee’s account? + +Use the **Lock Account** button if: +- You suspect unauthorized activity on your own or an employee's account. +- There are changes to bank accounts, logins, or suspicious payment activity. +- You want to pause activity on an account until Concierge investigates. + +--- + +## Which features are locked? + +The following actions are restricted when an account is locked in Expensify Classic: + +### Profile settings +- Adding a secondary login +- Adding or remove Two Factor Authentication (2FA) +- Domain Admins cannot reset Two Factor Authentication for Domain Members +- Inviting Copilots + +### Wallet settings +- Connecting, updating or removing bank accounts + +### Domain management +- Adding or removing Domain Admins (`Settings > Domains > Domain Admins`) +- Inviting or closing Domain Members (`Settings > Domains > Domain Members`) + +### Workspace members +- Inviting, removing, or importing members via spreadsheet + +### Expensify Cards +- Enabling Expensify Cards +- Editing limits (`Settings > Domains > Company Cards`) +- Showing card details +- Activating cards from the Inbox +- Adding to Apple Wallet/Google Pay +- Requesting a new card + +**Note:** +- If the user is a **Domain Admin**, all cards under the domain will be locked. +- If they are only a **cardholder**, only their personal cards are locked. + +### Reimbursements and payments +- Clicking **Reimburse** on reports +- Clicking **Pay** on bills if the member is a reimburser + - Applies to all items submitted by or payable by the locked member + +--- + +## How to do it? + + +- **Members:** The **Lock Account** button appears at the bottom of the screen in `Settings > Account > Profile`. + +- **Domain Admins:** You can lock a domain member's account using the **Lock Account** option located in `Settings > Domains > Domain Members > Edit Settings`. + +--- + +## Unlocking an account + +This button is not reversible without the assistance of an Expensify team member. Once the account is locked, a member of the Expensify team will work with you to take the necessary steps to secure your account and remove any unauthorised access. Only once these steps are taken will the account be unlocked. + +--- + +# FAQ + +## Why can’t I unlock my account? + +Account unlocks must be handled by Expensify to ensure the integrity of your data and prevent unauthorized access. Use Concierge for help, and we'll guide you through the next steps. + +
From 8bad9a4ee57712e109d0e9dfa1a25cc3b66ddabe Mon Sep 17 00:00:00 2001 From: kadiealexander <59587260+kadiealexander@users.noreply.github.com> Date: Wed, 30 Apr 2025 19:46:01 +1200 Subject: [PATCH 2/4] Create Locked-Account-Tool.md --- .../settings/Locked-Account-Tool.md | 78 +++++++++++++++++++ 1 file changed, 78 insertions(+) create mode 100644 docs/articles/new-expensify/settings/Locked-Account-Tool.md diff --git a/docs/articles/new-expensify/settings/Locked-Account-Tool.md b/docs/articles/new-expensify/settings/Locked-Account-Tool.md new file mode 100644 index 000000000000..a63d89095c70 --- /dev/null +++ b/docs/articles/new-expensify/settings/Locked-Account-Tool.md @@ -0,0 +1,78 @@ +--- +title: Lock Account Tool +description: Learn how the locked account tool works in New Expensify, when to use it, what features are blocked, and how users can regain access. +keywords: [locked account, New Expensify, lock features, wallet disabled, card suspended, 2FA blocked, unlock account] +--- +
+ +The locked account tool blocks access to high-risk features when an account is suspected to be compromised. It prevents unauthorized actions and protects sensitive account and payment functions. + +--- + +## When is it appropriate to click the button for your own account or for your employee’s account? + +Click the **Lock Account** button if: +- Your account is compromised (e.g., unexpected logins or changes). +- An employee's account appears at risk. +- Suspicious actions like changing contact methods or adding payment methods occur. + +Locking the account restricts critical permissions and alerts Concierge to review the situation. + +--- + +## Which features are locked? + +The following actions are blocked in Expensify when an account is locked: + +### Contact & security +- Adding a new contact method +- Setting a secondary contact method as default +- Adding or removing Two Factor Authentication (2FA) +- Adding or removing Copilots + +### Wallet & bank accounts +- Adding, deleting, or updating bank accounts (`Settings > Wallet`) +- Enabling the Wallet + +### Workspace members +- Inviting a workspace member +- Removing a member from `Settings > Workspaces > Members` + +### Expensify Card +- Enabling Expensify Cards under `Settings > Workspaces > More features` +- Issuing cards and editing card limits +- Revealing virtual Expensify Card details +- Activating physical Expensify Cards + +**Note:** +- If the user is a **Workspace Admin**, all cards under the workspace will be suspended. +- If the user is only a **cardholder**, only their personal cards will be suspended. + +### Reimbursements and payments +- Clicking **Pay** on reports, IOUs, invoices + - Blocked for: reports submitted by the locked user + - Blocked for all reimbursements if the user is a reimburser + +--- + +## How to do it? + +The **Lock Account** button is located at `Settings > Security > Lock Account`. + +**Note:** This button is not reversible. Once the account is locked, a member of the Expensify team will secure your account and be in touch to assist you with unlocking the account. + +--- + +## Unlocking an account + +This button is not reversible without the assistance of an Expensify team member. Once the account is locked, a member of the Expensify team will work with you to take the necessary steps to secure your account and remove any unauthorised access. Only once these steps are taken will the account be unlocked. + +--- + +# FAQ + +## Why can’t I unlock my account? + +Only Expensify can unlock an account. This safeguard ensures no bad actors can reverse the lock before your account is secure. Use the Concierge chat for support, and our team will assist as soon as possible. + +
From d16cc9db3df4eaf740544d0512bcb150987945d8 Mon Sep 17 00:00:00 2001 From: Lauren Schurr <33293730+lschurr@users.noreply.github.com> Date: Wed, 30 Apr 2025 09:50:29 -0700 Subject: [PATCH 3/4] Update docs/articles/expensify-classic/settings/Locked-Account-Tool.md Co-authored-by: Amy Evans --- docs/articles/expensify-classic/settings/Locked-Account-Tool.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/articles/expensify-classic/settings/Locked-Account-Tool.md b/docs/articles/expensify-classic/settings/Locked-Account-Tool.md index 197eb54c6c5e..ae9cd2d30d55 100644 --- a/docs/articles/expensify-classic/settings/Locked-Account-Tool.md +++ b/docs/articles/expensify-classic/settings/Locked-Account-Tool.md @@ -24,7 +24,7 @@ The following actions are restricted when an account is locked in Expensify Clas ### Profile settings - Adding a secondary login -- Adding or remove Two Factor Authentication (2FA) +- Adding or removing Two Factor Authentication (2FA) - Domain Admins cannot reset Two Factor Authentication for Domain Members - Inviting Copilots From f5bded51a0e893debb5190a2bffb5a548c2c4a26 Mon Sep 17 00:00:00 2001 From: Lauren Schurr <33293730+lschurr@users.noreply.github.com> Date: Wed, 30 Apr 2025 09:50:41 -0700 Subject: [PATCH 4/4] Update docs/articles/expensify-classic/settings/Locked-Account-Tool.md Co-authored-by: Amy Evans --- docs/articles/expensify-classic/settings/Locked-Account-Tool.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/articles/expensify-classic/settings/Locked-Account-Tool.md b/docs/articles/expensify-classic/settings/Locked-Account-Tool.md index ae9cd2d30d55..8f1fa546a256 100644 --- a/docs/articles/expensify-classic/settings/Locked-Account-Tool.md +++ b/docs/articles/expensify-classic/settings/Locked-Account-Tool.md @@ -68,7 +68,7 @@ The following actions are restricted when an account is locked in Expensify Clas ## Unlocking an account -This button is not reversible without the assistance of an Expensify team member. Once the account is locked, a member of the Expensify team will work with you to take the necessary steps to secure your account and remove any unauthorised access. Only once these steps are taken will the account be unlocked. +This button is not reversible without the assistance of an Expensify team member. Once the account is locked, a member of the Expensify team will work with you to take the necessary steps to secure your account and remove any unauthorized access. Only once these steps are taken will the account be unlocked. ---