When a Sprwt staff member (sprwt.io email) opens the onboarding config, Sprwt emails them a 6-digit code and shows the You need to authenticate page: In order to generate your onboarding access please enter the code that was sent to your email. Enter the code and press Confirm Code. A valid code grants onboarder access for 24 hours (Authenticated with success! Your access will be valid for 24 hours!) and the code itself expires after 2 hours; Resend Authentication Code re-sends the current unexpired code. An invalid or expired code shows Error! Invalid Code!. Non-Sprwt users who open the page are redirected home.

While authenticated, the onboarder is treated like an admin only on the specific screens built to accept it — the onboarding config screen itself, the guided wizard, the Go Live checklist, Client Config, Integrations and Stripe Account Settings. It is not a blanket admin permission across every screen in the app.