Adding & Removing Users on Ucraft | OpsBlu Docs

Adding & Removing Users on Ucraft

Adding & Removing Users on Ucraft — setup, configuration, and best practices for Ucraft.

Ucraft is a hosted website builder with built-in e-commerce. It manages team access through its dashboard, supporting collaborative editing on websites, online stores, and landing pages. Ucraft distinguishes between team members (dashboard collaborators) and store customers (e-commerce accounts).

How Ucraft User Management Works

Ucraft's user model includes:

  • Account Owner -- The Ucraft subscription holder with full control over billing, websites, and team
  • Team Members -- Collaborators invited to help manage specific websites
  • Store Customers -- Shoppers who create accounts on your Ucraft-powered online store
  • Blog Subscribers -- Users who subscribe to your blog's email notifications

Team member access is managed through the Ucraft dashboard. The number of team members you can invite depends on your Ucraft plan.

Adding Team Members

  1. Log in to the Ucraft dashboard at https://www.ucraft.com/dashboard
  2. Select the website you want to share access to
  3. Click Settings in the left sidebar
  4. Navigate to Team Members (or Collaborators)
  5. Click Invite Member
  6. Enter the team member's email address
  7. Select their permission level:
    • Admin -- Full access to the website editor, settings, and e-commerce (excluding billing)
    • Editor -- Can edit pages, blog posts, and media
    • Blog Author -- Can create and manage blog posts only
  8. Click Send Invitation

The invited user receives an email with a link to accept. They will be prompted to create a Ucraft account if they do not have one.

Managing Per-Website Access

Each team member invitation is scoped to a specific website. If you manage multiple Ucraft websites, you must invite team members separately for each one:

  1. Switch to the target website in the dashboard
  2. Go to Settings > Team Members
  3. Invite the member for this specific site

This provides natural isolation between different client projects or business units.

Adding Store Customers

Customer Self-Registration

Ucraft e-commerce stores support customer account creation during checkout:

  1. In the website editor, ensure Customer accounts are enabled under Store Settings > Checkout
  2. Customers create accounts during the checkout process
  3. Registered customers can:
    • Track order status
    • View order history
    • Save shipping addresses
    • Manage wishlists

Manual Customer Creation

  1. In the Ucraft dashboard, navigate to your store
  2. Click Orders & Customers in the left sidebar
  3. Select Customers
  4. Click Add Customer
  5. Fill in the details:
    • First Name and Last Name
    • Email (used for login)
    • Phone (optional)
    • Shipping Address (optional)
  6. Click Save

The customer receives an email to set their password.

Customer Management via Ucraft API

# Ucraft provides a REST API for e-commerce management
# Create a customer via API
curl -X POST "https://api.ucraft.com/v1/customers" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "first_name": "Jane",
    "last_name": "Developer",
    "email": "jane@example.com",
    "phone": "+15550100",
    "accepts_marketing": true
  }'

# List all customers
curl "https://api.ucraft.com/v1/customers?page=1&per_page=50" \
  -H "Authorization: Bearer YOUR_API_KEY"

Bulk User Management

Bulk Customer Import

Ucraft supports CSV import for customer data:

  1. Navigate to Orders & Customers > Customers
  2. Click Import (or the upload icon)
  3. Upload a CSV file with the following columns:
    first_name,last_name,email,phone,address_line1,city,state,zip,country
    Jane,Developer,jane@example.com,+15550100,123 Main St,Portland,OR,97201,US
    John,Editor,john@example.com,+15550101,456 Oak Ave,Seattle,WA,98101,US
    
  4. Map CSV columns to Ucraft customer fields
  5. Click Import

Bulk API Operations

// Node.js script for bulk customer creation
const API_KEY = 'your_ucraft_api_key';
const BASE_URL = 'https://api.ucraft.com/v1';

async function createCustomer(customer) {
  const response = await fetch(`${BASE_URL}/customers`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify(customer),
  });
  return response.json();
}

async function bulkImport() {
  const customers = [
    { first_name: 'User', last_name: 'One', email: 'user1@example.com' },
    { first_name: 'User', last_name: 'Two', email: 'user2@example.com' },
    { first_name: 'User', last_name: 'Three', email: 'user3@example.com' },
  ];

  for (const customer of customers) {
    try {
      const result = await createCustomer(customer);
      console.log(`Created: ${customer.email}`, result.id);
    } catch (error) {
      console.error(`Failed: ${customer.email}`, error.message);
    }
    // Respect rate limits
    await new Promise(resolve => setTimeout(resolve, 300));
  }
}

bulkImport();

Bulk Team Invitations

Ucraft does not provide a bulk invite feature for team members. Invitations must be sent one at a time through the dashboard. For agencies managing many collaborators, maintain a tracking document of team members and their per-website access levels.

Removing and Deactivating Users

Removing Team Members

  1. Go to Settings > Team Members for the specific website
  2. Find the team member in the list
  3. Click the Remove (trash or X) icon next to their name
  4. Confirm the removal

The team member immediately loses access to that website. Their personal Ucraft account remains active.

Important: Removing a team member from one website does not affect their access to other websites they have been invited to. You must remove them from each website individually.

Removing Store Customers

  1. Navigate to Orders & Customers > Customers
  2. Find the customer via search
  3. Click on the customer record
  4. Click Delete Customer
  5. Confirm the deletion

What happens to their data:

  • Order history is preserved in the system for accounting and shipping records
  • The customer's saved addresses and payment methods are removed
  • Wishlist items are deleted
  • The customer can no longer log in to track orders
  • Blog comments (if any) may remain visible on published posts
  • Newsletter subscription status is removed

Deactivating vs. Deleting Customers

Ucraft does not have a native "deactivate" toggle for customer accounts. To effectively block a customer without deleting:

  1. Open the customer record
  2. Change their email address to an invalid format (e.g., prepend DISABLED_)
  3. Save -- this prevents them from logging in or receiving communications

This preserves the customer record and order history while blocking access.

Removing via API

# Delete a customer
curl -X DELETE "https://api.ucraft.com/v1/customers/{customer_id}" \
  -H "Authorization: Bearer YOUR_API_KEY"

SSO and Enterprise Authentication

Ucraft does not natively support SAML, LDAP, or OpenID Connect for team member authentication. All team members authenticate through Ucraft's standard email/password system.

Available authentication enhancements:

  • Google social login for team members (sign in with Google when accepting invitations)
  • Two-factor authentication -- enable in account security settings
  • Customer social login -- configure Google and Facebook login for your store's customer checkout

For enterprise teams that require centralized identity management, consider:

  • Using a password manager (1Password, Bitwarden) with shared vaults for team credentials
  • Implementing Cloudflare Access or similar zero-trust access in front of the Ucraft dashboard URL
  • Using Ucraft's API to integrate customer authentication with your organization's IdP

Access Audit Checklist

  • Review team members for each website quarterly under Settings > Team Members
  • Verify permission levels match current responsibilities (Admin vs. Editor vs. Blog Author)
  • Check that former contractors and agency partners have been removed from all websites
  • Audit customer accounts for test data that should be cleaned up
  • Review API key usage and rotate keys if team members with API access depart
  • Check billing to ensure team member count aligns with plan limits
  • Verify two-factor authentication is enabled for all team members with Admin access
  • Document all team access changes, especially for multi-website environments