Flex Desk Booking
Admin
Flex Desk Booking
Admin
Master switch for the boss "Team view". The Business Center tab has its own switch (in the Business Centers section below).
Off = team leaders can't open the Team view. On = the boss Team view becomes active.
Team view shows fake test data instead of real bookings — safe to explore.
The stronger alternative to an emailed code: people prove who they are against E.ON's own tenant, so this app inherits whatever MFA and conditional access already applies to them instead of running its own. Nobody has to enrol anything.
Neither is a secret — both appear in the address bar during sign-in and are useless without a successful authentication against the tenant. The redirect URI IT must register is shown below; it has to match exactly, trailing slash included.
Redirect URI to register:
Off = nothing changes. On = the people chosen below can no longer identify themselves by typing a KID; they must sign in. Everyone else is unaffected until you widen it.
A KID on its own is a weak secret — it is on badges and in chat threads. With this on, typing a KID identifies nobody until the person also enters a 6-digit code mailed to their work address.
Off = a KID alone identifies someone, as today. On = the people chosen below must also enter a code.
Mails a real code to one person's resolved address without switching anything on. Do this before you turn the feature on.
Who can administer this app, as people rather than as a shared password. Everyone here signs in with their own password, so the history below names whoever acted. A super-admin can invite, promote and remove administrators; an ordinary admin has every other power on this page but cannot change who holds the keys.
Holding a desk for somebody else currently requires full admin rights — far too much power for “please keep a desk for our visitor”. This hands out that one job on its own: the people listed below may book and cancel on behalf of others, and gain nothing else. They never see this panel.
Off = only administrators can, exactly as today. On = the people listed below can too.
The roster, the org chart and the reporting lines moved to the KIDs page, where people can also be added, edited and archived.
External offices people can book instead of HQ. Edit a row and press Save, or remove it.
Off (default) = the Business Center tab is hidden for everyone and centre picks never block HQ desks. On = employees can book a centre for a time slot and see who else is there.
| Name | Address | Phone | Active |
|---|
Who has a Team-view login. Set or reset a password for a KID (min 6 characters), or remove the login.
Who may book each area. Add or remove a KID to grant or revoke access — this controls parking plans and restricted office zones.
Set check-in per area. When on, people must check in within the window before/after their start time or the spot is released as a no-show. When off, the spot is held for the whole booking.
After this many missed check-ins, the next booking is blocked by a warning the person has to acknowledge — a promise to check in or cancel. Accepting it clears those misses, so the warning returns only if they miss again. Only areas that require check-in count.
Choose what the Statistics page shows. Switching a section off hides it for everyone who can open Statistics. The totals and the period filter are always shown.
The full booking list now lives on the All bookings page — pick a date, switch desks / meeting rooms, and filter by name or KID.
What people sent from the profile menu, newest first. Bug reports carry the reporter's KID so you can ask follow-up questions; feedback is stored without one, so there is nobody to reply to. Kept for 180 days.
Cancel today's and all upcoming bookings. Recurring reservations are kept.
Oldest booking: —
Bookings are never deleted by hand. The nightly retention run alone applies the periods stated in the privacy notice.
Archive is for someone who has left: their name is replaced, their access is revoked and any future bookings are released, but past bookings stay so the statistics don't change. Erase is for a genuine erasure request and deletes their bookings too.
The Article 13 notice every colleague can open. Edit the wording in place, one section and one language at a time — anything you leave alone keeps the text the app ships with. Retention periods are taken from the code, so a sentence can never quote a period the app does not apply.
Leave the address empty for the built-in page. A full https:// address points the links in the footer and profile menu at a corporate privacy page instead.
Passcodes are rotated via Supabase secrets — see DEPLOY.md.