Shared Accounts

Suppose Ava and Lee both use the username stockroom and the same password. This is a shared account. If the log shows that stockroom changed an order, you cannot tell which person made the change.

Give each worker the access they need on their own account instead. For example, add both Ava and Lee to the stock group:

seclab add ava stock

You should see:

Added ava to stock.

seclab add lee stock

You should see:

Added lee to stock.

Once both people can work through their own accounts, disable the shared account:

seclab disable stockroom

You should see:

Disabled stockroom. They can no longer log in.

Ava and Lee can still do the same work, but their actions now appear under their own usernames. Changing the shared password would not solve the problem because they would still be using the same account.