Support accounts touch a lot of customer data, so security settings matter. Enable two-factor auth, grant least privilege, and review login records periodically.
Enable two-factor auth
Require 2FA for admin and supervisor accounts to blunt the impact of leaked passwords.
- Authenticator app support
- Backup codes
- Enforce org-wide
Least privilege
Give agents only what they need; reserve export and configuration rights for a few people.
- Role-based access
- Limit data visibility
- Review permissions regularly
FAQ
How do I revoke access when someone leaves?
Disable the account in account management; open conversations and tickets are reassigned by rule.
Can password policies be enforced?
Enterprise can enforce strength and rotation policies.