With Custom Logins or Organization Permissioned Logins, you can give other people or members in your organization access to your FTX account with pre-determined permissions.
Organization Permissioned Logins
With Organization Permissioned Logins, you can invite other members in your organization to access your FTX account with pre-determined permissions by simply entering their email.
Organization Permissioned Logins are different from the existing custom login system in that it treats logins like "users" of the account rather than "access codes". These logins have their own email address, password, and 2FA and use the organization's name on the login page.
This feature is currently only available to corporate accounts.
Summary - How to get started with Organization Permissioned Logins:
- Sign in to your FTX account and navigate to the Security tab on your profile page.
- Easily add and delete permissioned logins. Permissioned logins will receive an email link to set up their own password and 2FA.
- Configure access levels specific to each permissioned login.
- Assign permissioned logins with or without subaccount restriction.
Creating a Permissioned Login
Under Settings, scroll down to the Account Security section and click the 'Organized Permissioned Logins' tab. You'll see a form that lets you create a login with permissions. When a permissioned login is created, the recipient is emailed a link to an activation page where they can set up their own password and 2FA independent from the main account. Two-factor authentication is required to log in.
Only the main login can manage permissioned logins, reset the main login password and 2FA and change withdrawal password settings.
Permissions & Roles
While creating a permissioned login, you can specify permissions, which will determine the level of access that user will have.
- Subaccount: You can restrict the login's access to only one subaccount, or allow access to all subaccounts
- Read-Only: Can't take actions on the site (e.g. cannot trade, withdraw, transfer), but can view and download items such as trade history
- Can Withdraw: Allowed to withdraw on the blockchain, to OTC, or transfer between subaccounts
Examples of permissions and roles are as follows:
- Auditor = Read Only
- Trader = Not Read-Only, Cannot Withdraw
- Admin = Not Read Only, Can Withdraw
Setting the Organization Name
Organization names are used by permissioned logins at the user login screen. Your organization name can be a nickname. It must be unique and will not affect any other part of your profile. Existing permissioned logins will be notified via email about organization name changes.
Signing in with a Permissioned Login
Head directly to https://ftx.com/login, toggle on Custom Login and Use Organization then enter in your user email, password, and company's Organization Name. If you don’t know the organization name, please ask the main account holder who can easily find the organization name under their profile settings. Permissioned logins also receive an email with a deep link to the login form to automate this process. For example, with the organization name "xyz-org" you can navigate to https://ftx.com/login?permissionedLoginOrg=xyz-org which will auto-populate the login form.
Deleting a Permissioned Login
If you want to delete a permissioned login, you can click the trash can icon in the custom login table on your settings page. Doing so will remove access for anyone currently logged in and using it. The main user will be able to view a history of all logins directly under Login History.
2FA
All permissioned logins are restricted to read-only access until 2FA is enabled. Once 2FA is enabled, their access is restored to initial settings. You may change your 2FA type using the Login Settings section on the settings page when logged in to them.
Only the main login can change withdrawal password settings, activate if withdrawals require 2FA, reset the main login password, and manage other logins.
FTX OTC
Permissioned logins are compatible with FTX OTC. Only those with no subaccount restriction are allowed access to OTC. The other settings (read-only, withdrawal-enabled) also apply when using FTX OTC.
To use them for OTC, you need to first log in to FTX using the above methods and then can visit https://otc.ftx.com/.
Custom Logins
Go to your Settings page, scroll down to the Account Security section, and click the 'Logins' tab.
You'll see a form that lets you create a login with permissions. Each login has a name and password, and you can specify the following permissions:
- Subaccount: You can restrict the login's access to only one subaccount, or let it access all accounts
- Read-Only: read-only logins can't take actions on the site (e.g. cannot trade, withdraw, transfer), but can view and download things like trade history.
- Can Withdraw: whether or not this login is allowed to withdraw on the blockchain, to OTC, or transfer between subaccounts
The form above is filled out with information that would specify a login called "trading-only", that is allowed to take actions on the site (it isn't read-only) but cannot withdraw.
It also shows an existing login called "read-only-subby" that only allows read-only access to the subaccount named "subby".
Using a login
There are two ways to authenticate with a custom login.
1) You can go to the URL next to the login you want to use (can click the "Copy" button next to it), and the login form at that URL will be pre-populated with a code that corresponds to that login:
2) You can go directly to https://ftx.com/login and enter your account email (used for your main login), the custom login name (like "read-only-subby"), and your password.
3) Restrictions of custom logins:
- custom logins restricted to a single sub can’t transfer assets between subs (even if withdrawals are enabled)
- custom logins can’t schedule addresses for whitelisting (but can save addresses)
- read-only custom logins must have 2fa enabled to view deposit addresses
Configuring 2FA
When non-read-only logins are created, their 2FA is set to that of the main login. You may change their 2FA using the Login Settings section on the settings page when logged in to them.
Only the main login can change withdrawal password settings, change if withdrawals require 2FA, reset the main login password, and manage other logins.
FTX OTC
Custom logins are compatible with FTX OTC. Only those with no subaccount restriction are allowed access to OTC. The other settings (read-only, withdrawal-enabled) also apply when using FTX OTC.
To use them for OTC, you need to first log in to FTX using the above methods and then can visit https://otc.ftx.com/.
Deleting a login
If you want to delete a permission login, you can click the trash can icon in the Login table on your settings page. Doing so will remove access for anyone currently logged in and using it.
__________________________________________