Roles and access

Our support team sees the shape of your account, not its content.

Full support access is a time-limited grant you control, not a promise in a policy document. Above that sits ordinary role scoping: account admins, admins, general managers and maintenance engineers, each seeing their own part of the circuit.

A 20-minute walkthrough on your own locations. We reply within one business day, and every plan is backed by our 30-day guarantee.

Can support staff at the vendor see our data?

Not its content, unless an administrator at your circuit grants it. Without a grant, the CineScope support account sees the shape of your account — counts, how long reports have waited, which issue types recur — but no guest words, contact details, photos, staff names or business figures. When you want help that needs more, you grant full access for 1, 4, 8 or 24 hours; it ends by itself, and admins are emailed when support signs in. Support can manage accounts and settings without a grant.

This is a procurement question, and most vendors answer it with a paragraph about internal policy. The answer here is a setting held by the customer.

Who sees what?

Account admin

The owner's role. Every building, case and score, plus people, roles, locations, placards and the settings — including support access grants.

Admin

Day-to-day administration across the whole circuit, without the account-level controls.

General manager

Their own buildings and nothing else. A GM's pages are their sites; another region's cases are not hidden behind a filter they can clear, they are simply not theirs.

Maintenance engineer

The work: cases for their issue types at their buildings, with notes and photos, without the reporting surface built for owners.

How do people sign in?

Two-step verification

Can be required for every admin account: a passkey, an authenticator app or an emailed code.

Face ID sign-in

On devices that support it — the realistic option for a duty manager unlocking a phone mid-shift.

Security event log

Sign-in and account security activity on the record, separate from the per-case history of who worked what.

Unlimited users

Users and admins are unlimited on every plan, so nobody shares a login to save a seat.

Face ID lock

Each person can have the app lock itself after 15 minutes untouched, or every time they leave it, and open again with Face ID. A locked session is refused by the server, not just blurred, and their other devices are unaffected.

Security emails

A person is emailed when their password is changed or reset, two-step verification is turned on or off, or their account is signed in to from a new device. A failed sign-in sends nothing, so nobody can flood an inbox by guessing.

How do crew get in without an account?

Crew are records a manager keeps, not accounts, and each opens their own shifts from a link of their own. At the back-office tablet a manager sets up for one building, crew tap their name and enter a four-digit PIN they chose themselves; five wrong tries locks that person out for 15 minutes. Shift managers also see the building's open guest reports there, or on their own phone during a shift they are rostered on. More on staffing.

Access and security questions

Can support staff at the vendor see our data?

Not its content, unless an admin at your circuit grants it. Without a grant, the CineScope support account sees the shape of your account — counts, how long reports have waited, which issue types recur — but no guest words, contact details, photos, staff names or business figures. A grant gives full access for 1, 4, 8 or 24 hours and ends by itself, and admins are emailed when support signs in. Support can manage accounts and settings without one. It is a procurement question most vendors answer with a policy document; here it is a setting you hold.

What roles does CineScope have?

Account admins (the owner's role), admins, general managers and maintenance engineers. Each sees their own scope — a general manager's pages cover their own buildings and nothing else, and an engineer sees the work for their issue types and buildings rather than the circuit's reporting.

Does CineScope support two-factor authentication?

Yes. Two-step verification can be required for every admin account — a passkey or an authenticator app, or a six-digit code by email — along with Face ID sign-in on devices that offer it.

Is there an audit trail of security events?

Yes. A security event log records sign-in and account security activity, separately from the per-case history that records who worked what.

Can a general manager see another site's guest reports?

No. Scope is applied to the pages themselves, not as a filter a user can widen, so a manager's view is their own buildings.

Can a maintenance account be limited to some locations and issue types?

Yes. Each maintenance account covers every location or chosen ones, and every issue type or chosen ones, both set on Active users. An emergency at one of its locations still reaches it, whatever the issue type.

How does support access end?

By itself, when the grant runs out, or earlier whenever an administrator at your circuit ends it. The vendor cannot grant itself access.

More on how CineScope is built and hosted on the security page, what you can take out of it on your data, or back to all features.

A 20-minute walkthrough on your own locations. We reply within one business day, and every plan is backed by our 30-day guarantee.