Aotearoa Web Design will provide or transfer administrator-level access to any website developed or hosted by us – to you the client, or a third party.
However – as an administrator of your website (even temporarily), it is vitally important you are aware of the implications and responsibilities this entails.
Aotearoa Web Design follow Principle of least privilege security guidelines.
In information security, computer science, and other fields, the principle of least privilege (PoLP), also known as the principle of minimal privilege or the principle of least authority, requires that in a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.
A requirement of Administrator access is 2 factor authentication, more information on this is available here.
As an administrator of the website, the individual or company specified below is now solely responsible for the following – on either a temporary* or permanent basis;
- WordPress Security
- Plugin Updates
- Theme Updates
- Framework Updates
- WordPress Updates
- Spam Protection
Important: Once the form below has been submitted, the responsibility for the security of the website transfers immediately to the individual or company specified below – on either a temporary* or permanent basis.
WordPress Security, Updates & Backups
Aotearoa Web Design can and does provide ongoing support services, however, once administrator level access has been submitted to a third party, the responsibility for the website’s security no longer rests with Aotearoa Web Design.
Temporary Access *
If granting access to a third party is only required on a temporary basis, the individual or company specified below, accepts responsibility for all of the items above, until they or the website owner have notified Aotearoa Web Design by email that the work has been completed. At this point, Aotearoa Web Design will log back into the website, revert any priviledge changes, and confirm that the site remains secure. Once satisfied that this is the case the owner of the website will be notified that Aotearoa Web Design will resume responsibility for the website.
Aotearoa Web Design will not be held responsible for any work undertaken on your website by a third party. Any remedial action required as a result of unsupported coding or installation of additional plugins that cause any conflicts with the site will be chargeable at our current hourly rate during business hours & at time & a half outside of business hours.
If any changes made on your site by a third party affects the reliability or performance of other sites hosted on the same server, you will also be liable for the costs incurred to remedy this.
Third Party Support
Aotearoa Web Design can provide the third party with support – this is chargeable at our current hourly rate.