> ## Documentation Index
> Fetch the complete documentation index at: https://docsy3.mile.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Access and Sign-in

> Multi-factor authentication, device limit, mobile-only access and location tracking for a role.

These permissions control how and where people with a role sign in, and how the field app tracks them. Set them on **Settings › Permission** for the role, then click **Save**. Use **Search permissions** to jump to each one.

> [!NOTE]
>
> Required permission:
>
> * View permission
> * Edit permission

## Multi-factor authentication

These switches sit in **Advanced › Multi-factor authentication**. Require a second step when people with this role sign in. There are two switches, so you can allow both. When both are on, Cloud-based Authenticator is asked for first.

![Multi-factor authentication](https://mintcdn.com/mile-app/WPibWyW63U4l5gcF/images/v4/settings/permission-mfa.png?fit=max\&auto=format\&n=WPibWyW63U4l5gcF\&q=85\&s=120ee1f2f5d8dc38e8c526679532943f)

| Switch | Second step |
| - | - |
| **Multi-factor authentication by Cloud-based Authenticator** | A code from an authenticator app such as Google Authenticator. The user sets it up from their profile menu; see [Password and Sign-in Security](https://docsy3.mile.app/pages/account/password-and-security.md). |
| **Multi-factor authentication by one-time passcode** | A one-time code sent to the user. When the switch is on, **Send the code by** lets you choose **Email**, **WhatsApp** or **SMS**. |

**Email** is always available. **WhatsApp** and **SMS** are set up for your organization by your platform provider; if one is already chosen you can see it but not change it. When the channel is WhatsApp or SMS and some users of the role have no phone number, the page shows how many; those users receive the code by email.

If a user loses their authenticator app, an admin can reset it from **Settings › User**. See [Managing Users](https://docsy3.mile.app/pages/settings/user/managing-users.md#reset-cloud-authenticator).

## Device limit

**Device limit**, in **Advanced › Device limit**, allows only one active session per user. When it is on and a user signs in on another device, every earlier session is **signed out automatically**. This applies to the web app and the field app.

![Device limit](https://mintcdn.com/mile-app/WPibWyW63U4l5gcF/images/v4/settings/permission-access.png?fit=max\&auto=format\&n=WPibWyW63U4l5gcF\&q=85\&s=c75b34e13240d33e7fcf3232a37854dc)

## Mobile app access only

People with a role that has **Mobile app access only** (in **Advanced › Access**) can sign in only on the field app. Signing in on the web app is refused, with a message telling them to ask their admin for web access.

![Mobile App Access Only](https://mintcdn.com/mile-app/WPibWyW63U4l5gcF/images/v4/settings/permission-mobile-only.png?fit=max\&auto=format\&n=WPibWyW63U4l5gcF\&q=85\&s=3c53300c8d7f79ac5c6af6bb543356bd)

It suits drivers and other field workers who never need the web app, and organizations that must keep office data off personal browsers. When it's off (the default), people can sign in on both.

## Location Tracking (Start Trip and End Trip)

**Start Trip - End Trip**, in **Monitoring › Tracking**, turns on trip-based tracking in the field app.

![Location Tracking](https://mintcdn.com/mile-app/WPibWyW63U4l5gcF/images/v4/settings/permission-tracking.png?fit=max\&auto=format\&n=WPibWyW63U4l5gcF\&q=85\&s=aa5f0c29ef929d5f76c09096fdd9d6bd)

When it's **on**, field workers tap **Start Trip** before they begin their tasks and **End Trip** when they finish. Their location is recorded only between the two, and shows on [Tracking](https://docsy3.mile.app/pages/monitoring/tracking/introduction.md). Turning it on shows three settings:

* **Location tracking**: how often the location is recorded.

  | Mode | Records the location |
  | - | - |
  | **Power saving** | Every 10 minutes, at least 10 metres apart. Saves battery. |
  | **Balanced** | Every 3 minutes, at least 20 metres apart. Balances accuracy and battery. |
  | **High accuracy** | Every minute, at least 10 metres apart. Uses the battery quickly. |

* **Start radius** (metres): how far from the hub a trip may start. For example, with 500 a field worker must be within 500 metres of the hub to start.

* **End radius** (metres): how far from the hub a trip may end.

Zero means anywhere: with both radii at 0, trips can start and end from any location.

When it's **off**, the field app records only the coordinates captured with each task, and doesn't track the field worker between tasks.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.