Help with Vision Account

One Vision Account signs you in to every Vision app, such as PrinterVision and WareVision. You sign in once; the apps take you from there.

Pages

Page What it is for
Sign in Continue with Microsoft; or your e-mail address and password, the first step; or Sign in with a passkey. It says which app you are signing in to ("to continue to PrinterVision"), and every later step shows that app. Where you land when you're not signed in; each product's website has the way to start a trial
Your administrator needs to approve Vision Account When your organisation's Microsoft settings let only its administrator agree to new apps
Check your mail The six-digit code we e-mail you, the second step for an account without an authenticator app or passkey
One more step The second step for an account with an authenticator app or passkey
Forgot your password? and Choose a new password Setting a new password with a code we e-mail you
Start your free trial, Check your mail, Your company Signing up: your account, then your company. From an invitation the first page is Create your account, and there is no company to make: you land in the organisation that invited you. When your company is on Vision Account already with your mail domain, Your company becomes Join and that organisation's name
Welcome (your apps) Who is signed in, the organisations your account belongs to, and the ones you may join; for each organisation the Vision apps it can use or try (Open, or Try it free for its administrators; Soon in the suite for an app that isn't connected yet), Set up your organisation while it is new, and a warning in the last week of a trial. Your organisation's administration, Account security and, for CaptureTech's operators, the Operators' console are in the menu on the left
Your organisation For its administrators, in the menu on the left under Your organisation (Your organisations when you administer more than one), each under its name: Overview, People, Sites, Subscriptions, Sign-in & access, Security & support and Advanced, each with its pages as tabs at the top
Fleet enrolment code A new code for the handhelds of a place, shown once
Join (an invitation) Accepting an invitation you got by mail: Sign in to accept or Create your account, then Accept
Choose an organisation When an app's Switch organisation asks which one to open
Your company first When you open an app and your account doesn't belong to an organisation yet: Start a free trial for your company, or join colleagues or open an invitation from your Welcome page
Account security Your authenticator app, passkeys, recovery codes, and signing out everywhere
Set up an authenticator app The QR code and key for your phone
Your recovery codes New recovery codes, shown once, with Copy all codes
Talk to us A message to our support, signed in or not
Help This guide, opening with In this guide: a link to each of its sections
Operators' console For CaptureTech's operators: work across organisations (see For CaptureTech's operators below)
Page not found, No access, Too many tries, That took too long, Something went wrong When a page can't be shown (an address that doesn't exist, also inside your organisation); Back to your apps returns to the start, Go back and try again to the page you came from

Signed in, Account security, Help and Talk to us open in the same frame as your organisation, with the menu on the left, so the way back is always there. On a phone the menu is folded away: the menu button at the top left opens it. Every page has a quiet Help at the top right that opens this guide at the section about that page, and a page you open from a list has a button back to that list at the same place.

Signing up

The Start free button on a product's website opens Start your free trial, in that product's colours. No payment details are asked.

  1. Press Continue with Microsoft, or fill in Your name and Work e-mail address and press Continue. Throwaway mail services aren't accepted: a trial needs an address you keep.
  2. On Check your mail, type the six-digit Code we sent, choose a password in Choose a password and Password again, and press Continue. With Microsoft there's no password to choose. No mail? Look in your spam folder first, then press Send a new code. Only the newest code works.
  3. On Your company, fill in Company name, choose your Country (your time zone, language and VAT follow it) and name your First site. Tick that you agree to the terms of use and the data processing agreement, and press Start the trial.

Your organisation is ready at once, with you as its administrator, and you go straight into the product. When an app's sign-in sent you to sign up (Create an account on Sign in), you go straight back into that app, now with your organisation. You can add more sites and invite colleagues afterwards.

If your company is on Vision Account already with your mail domain, step 3 doesn't start a second company: the page is called Join with the organisation's name, and offers Join it or Ask to join it, as its administrators chose. After asking, Welcome says you asked until an administrator lets you in. If the organisation takes people by invitation only, ask one of its administrators to invite your address.

From an invitation, the steps are shorter: the invitation's page offers Create your account with the invited address filled in. Fill in Your name and press Continue, then type the Code and choose your password on Check your mail. The code proves the invited mailbox, so you land straight on Welcome, saying You joined and the organisation's name. An organisation that only lets people in with Microsoft still asks for that first: then the invitation's page opens again with Accept.

Every page keeps where you are going: an error, Send a new code and start again keep the product, the app you came from and the invitation, and what you typed stays filled in.

If the address already has an account, we mail it a note to sign in instead of a code. The page looks the same either way, so nobody can find out from it who has an account.

The first time your address is confirmed (by the code we mail you, or by Microsoft), any way in that was added to the account before (a linked Microsoft account, a passkey, an authenticator app) is removed, and any session on it ends. That way nobody who set up an account with your address before you did keeps a way into it.

Signing in

  1. On Sign in, fill in E-mail address and Password and press Continue. When an app sent you here, the page says so ("to continue to PrinterVision") and shows that app's name and colours on every step; afterwards you go straight back into it. If the password is wrong, the address you typed stays filled in. No account yet? Press Create an account: you come back to the same app or invitation afterwards.
  2. The second step depends on your account:
    • Without an authenticator app or passkey, we e-mail you a six-digit code. On Check your mail, type it in Code and press Sign in. The code works for ten minutes, once. No mail? Look in your spam folder first, then press Send a new code. Only the newest code works. sign in again starts over, still towards the same app.
    • With an authenticator app or passkey, One more step asks for it. Press Use your passkey, or type the code your app shows in Code from your authenticator app and press Sign in. No code is e-mailed: someone who can read your mail can't get around your app. Back to sign in starts over.
  3. With Microsoft: press Continue with Microsoft and sign in with your work account. The first time, you get a Vision Account with the same address. If you already have a Vision Account with that address, it is used when Microsoft confirms the address belongs to your organisation; otherwise sign in with your password and press Link a Microsoft account under Account security.
  4. With a passkey only: on Sign in, press Sign in with a passkey and confirm with your fingerprint, face or device PIN. No password needed. The button shows only in browsers that support passkeys.

While the page opens, your browser quietly does a small calculation that keeps automated password guessing out. You don't see it. If you press the button before it is done, the button says Checking your browser… for a moment and the form goes on by itself. A page left open a long time, or opened again with the browser's back button, gets a fresh check first. The check needs scripts switched on for this site; without them the page says so. If it ever can't finish, the page tells you and keeps what you typed: press the button again.

You stay signed in for up to twelve hours. After that, or after Sign out, you sign in again. Signing out here also signs you out of the apps you opened from it.

In the apps

Every app signs you in through your Vision Account: open a second app and you're in without signing in again. Its user menu shows who you are and in which organisation, with:

  • Switch organisation: Choose an organisation lists yours; press Open next to the one you want.
  • Account security: opens that page here.
  • Sign out: signs you out of that app, of your Vision Account, and of every other app you had open, on this device. Your other devices stay signed in; use Sign out everywhere for those.

If a link from somewhere else tries to sign you out, a Sign out? page asks first: press Sign out to go ahead, or Stay signed in. That way another website can't sign you out without you knowing.

What you see in an app follows your role in the organisation: a page your role may not open isn't in the menu, and opening it anyway shows that you have no access.

If your password is changed, or you or an administrator end your sessions, you are signed out everywhere: here within a minute, and in the apps as soon as they hear of it.

Account security

Open it with Account security in the menu on the left, under Your account, or from your name at the top right. To change anything on it, your sign-in must be from the last quarter of an hour; otherwise press Sign in again at the top first. Until then each card still shows how things stand, and says Sign in again to change this. where its button would be. Every change is e-mailed to you, so a change you didn't make doesn't go unnoticed.

Anything that takes a way in away or signs you out asks first: the button opens what will happen, with Cancel and a red button that says what goes. Nothing changes until you press that one.

  • Authenticator app: press Set up an authenticator app, scan the QR code with an app such as Microsoft Authenticator, Google Authenticator or 1Password (or type the Key), type the code the app shows and press Turn on. Copy next to the key copies it, for typing it into an app on this computer. Turn off, then Turn off the authenticator app, brings back the e-mailed code.
  • Microsoft: Link a Microsoft account lets Continue with Microsoft sign you in; Unlink, then Unlink Microsoft, removes it and signs you out on your other devices and in the apps. If you signed in this time with Microsoft, you sign in again with your password. If Microsoft is your only way in, add a passkey or set a password with Forgot your password? first.
  • Passkeys: type a Name for the new passkey (for example "Laptop") and press Add a passkey, then confirm on your device. A passkey only works on the real Vision Account site, so a fake site can't use it. Remove, then Remove the passkey, takes one off.
  • Recovery codes: with your first authenticator app or passkey you get ten recovery codes, shown once on Your recovery codes. Keep them somewhere safe, such as a password manager or on paper; Copy all codes copies them in one go. Each one signs you in once, when your phone and passkeys are gone: on One more step, open Lost your phone and passkeys? Use a recovery code. After that, Account security opens so you can set up a new app or passkey; Continue where you were going takes you on to the app or invitation you were signing in for. Make new recovery codes, then Replace my recovery codes, replaces every old one.
  • Sign out everywhere: press it, then Sign out of every device, to sign out of every app, on every device, this one included. Use it after losing a device.

When a trial ends

A trial runs for 30 days, without payment details. Subscriptions shows how many days are left, and from a week before the end Welcome and the organisation's Overview say so: Your LabelVision trial ends in 5 days. Extend by 14 days gives a trial more time once. When it ends, the product doesn't stop: printing approved labels and inspection keep working, while designing and settings become read-only. The organisation's administrators get a mail. Without a purchase, the product's data is deleted 90 days later; a second mail comes two weeks before. Nothing is ever deleted without both mails. Buying a plan comes in a later release; until then, talk to us (the link under Subscriptions) and we arrange it with you.

When your administrator must approve Vision Account

Some organisations let only their Microsoft administrator agree to new apps. Then Continue with Microsoft shows Your administrator needs to approve Vision Account with an Address for your administrator. Send it to them; they open it, sign in and press Accept. Vision Account only asks to see your name and e-mail address. Afterwards everyone in your organisation can continue with Microsoft. Until then, press Sign in with your e-mail address: you still go on to the app or invitation you started from.

A forgotten password

  1. On Sign in, press Forgot your password?, fill in E-mail address and press Send the code.
  2. On Choose a new password, type the code from the mail in Code, then your new password in New password and New password again, and press Save the new password. Then sign in with it: you go on to the app or invitation you were signing in for.

The new password must be at least 12 characters. A few words you'll remember work well. It can't be your e-mail address or a password everybody tries. Afterwards you're signed out everywhere, and you sign in with the new password. If an app sent you to sign in, that sign-in takes you back into the app. If you have an authenticator app or passkey, you still need it to sign in: a new password alone doesn't get around it.

Your sites

Sites in your organisation's menu is your organisation as it really is: the group at the top, its companies (a mother and its daughters), divisions, sites (a warehouse, DC, plant, store or office), buildings, areas (a hall, a zone, a dock, a line) and stations. Printers, labels, settings and access attach to these places, and what holds at a place holds for everything below it.

Each place is a row of the tree, indented under the one above it, with its buttons at the end of the row.

  • Add below adds a place under that row: choose its Kind, type its Name, and pick a Time zone (or leave Same as above), then Add. The order is fixed, so the list offers only what fits there: a site can sit under a company but never under an area, and nothing goes under a station. A small company needs no more than its sites; a group uses as many levels as it has.
  • Time zone and country come from the place above unless you give a place its own. A time zone shows as its city and its offset from UTC outside summer time, such as Brussels (UTC+01:00). Change a company's time zone, and every site below that didn't set its own follows. "Today's prints" and schedules go by the place's own clock.
  • Edit renames a place, gives it its own Time zone (or Same as above to take the one above again), or moves it with everything below it Under another place where it fits; then Save.
  • Retire a place you no longer use, bottom up: it keeps its history, nothing new goes there.
  • A company that leaves the group, or a company that joins another group: we move it for you, with everything below it (its printers and their jobs, subscriptions billed there, labels). Ask us through Talk to us. Its people stay in the group; the new organisation's administrator invites whom they need.

Operators on the floor

Operators without an e-mail address still print labels, and every print must be traceable to a person. Under People, Operators, whoever administers people at a site adds them: a name, their personal number, a PIN of four to eight digits and, if they have one, their badge; their site; and a role made for operators. Those roles come with apps that have work at a station, such as printing labels; until one of your organisation's apps has that, the page says there is no role to give an operator yet.

  • They sign in only at a registered station of their site: a PC or tablet on the line, enrolled like an agent (Sites, Devices, Get the download with What set to Station: where operators sign in). The station proves the place, the PIN or badge the person. The same PIN in a browser doesn't work.
  • A session lasts at most half an hour and ends when the next person signs in at the station.
  • Five wrong PINs lock the account for a quarter of an hour; Set gives a new PIN and lifts the lock.
  • What they print carries their name; their sign-ins are in the audit trail.
  • Nobody adds an operator with more than they hold at that site themselves.

Roles: who may do what, and where

A role is a set of permissions, given to someone at one of your sites, where it holds for that place and everything below it. Give a designer their role at the company whose labels they make, an operator theirs at their site, and they see and do exactly that.

  • Everyone in your organisation has a role across the organisation: Administrator (everything), User administrator (people), or Member (nothing by itself). Everything else is a role at a place: under People, Members, Give a role on the person's row (which Role, At which place, then Give the role), and Remove next to a role to take it back.
  • Built-in roles come with the apps, named after them (PrinterVision administrator, for example), and grow with them when an app adds a permission to one. The Roles list shows each role's permissions by area (Printers: add, remove, calibrate); a role with many areas shows how many permissions it has, and the list opens when you press it.
  • Your own roles, under Roles, Make a role: give it a Name, then Copy from a built-in role, or tick permissions from any app, listed per app and, within it, per area (a Site supervisor who sees the printers, prints labels and reviews inspection results); then Make the role. Your own roles stay as you made them; a copied one shows what its source gained since, so you can decide to add it.
  • A user administrator for one site: give someone User administrator at that site. They see that site and its people only, invite people to it, give roles there and switch its people off and on. They never see the rest of the organisation, the mail domains or the products.
  • Nobody gives more than they have: you can give a role only where you administer people, and only when you hold every permission of that role there yourself.
  • An invitation can be for a role at a place: the person becomes a member with that role there.
  • A place that moves takes its roles along; a change to anyone's roles reaches every app within seconds.

The audit trail

Security & support, Audit trail lists who did what in your organisation and when, one sentence per entry (Ada Admin invited ann@noordhaven.example): the organisation being created and its first site, people invited and switched off, roles given and taken back, places added and moved, API clients made and stopped, support's visits, settings changed, and every change by Vision Account itself, such as a trial that started or ended (Vision Account started the trial of PrinterVision). Products are named as they are sold (asked for a trial of LabelVision). Times are in UTC. Before anything is recorded, the page says Nothing recorded yet. Each entry is sealed together with the one before it, so nobody can change or remove one without it showing: the page says The trail is intact. Export as CSV gives you all of it, with the seals, for your auditor or your own records.

Administrators read it; so does anyone you give the Auditor role, who sees the trail and nothing else.

When Vision Account support helps

Our support works in your organisation only with your permission:

  1. They ask, with a reason (a ticket number, what they need to look at) and for at most eight hours. Your administrators get a mail.
  2. One of your administrators approves or declines under Security & support, Support access. Approved, support is in from then on, for the hours asked; End now sends them out earlier.
  3. While they're in, they work under their own name, marked (Vision Account support), and everything they do is in your audit trail. They can't approve their own visits, nor make API clients.

Untick Support access needs our approval if you'd rather let support in without asking each time; every visit is still in the audit trail.

API clients for your own systems

Your ERP, WMS or a script can work with the Vision apps by itself. An administrator makes an API client for it under Advanced, API clients:

  1. Give it a Name (WMS Antwerp), tick What it may do in each app (listed per app and per area, in words such as Submit jobs), and choose its Last day (at most a year).
  2. Make the client. The next page shows its client id and secret once. Copy the secret into your system now: we keep only a fingerprint of it, so nobody can show it again. Every administrator gets a mail that a client was made.
  3. Your system uses the id and secret to get a short-lived token from the address shown on that page, and sends the token with every call to an app (the app's integration guide has the details for your developers). A token works for ten minutes, for every app the client has permissions in.
  • The same client works for every app: one id and secret, and what it may do in each app is what you ticked.
  • Some permissions only count when your plan includes the matching feature; the page says which.
  • Stop a client the moment it is no longer needed, or when its secret may have leaked: no new token from then on; a token it already has runs out within ten minutes. A lost secret isn't recovered: make a new client and stop the old one.
  • The page shows when each client was last used, who answers for it and its last day.

Handhelds and fleet enrolment codes

Apps that run only on a handheld, such as ConsoleVision, have no website of their own: each handheld is enrolled at Vision Account and takes one device of your organisation's licence for that app. An administrator does this on the organisation page, under Sites, Devices:

  1. Under Make a fleet enrolment code, choose For which app, the place the handhelds belong to (For which place: a site, a building, an area, or the whole organisation), how long it stays valid (Valid for: three months unless you choose otherwise, at most a year) and, if you like, Devices at most. Press Make the code.
  2. The next page shows the Enrolment code once (it starts with CVE-). Copy it into the app's managed configuration in your device management (SOTI MobiControl, for example) for the handhelds of that place. We keep only a fingerprint of it, so nobody can show it again.
  3. Each handheld enrols by itself the next time the app starts, and shows under Handhelds with its name, place, device id and version, and when it was last seen. Nobody types anything on the handheld.
  • One code serves every handheld of the place, until it runs out, reaches its Devices at most, or is revoked.
  • Fleet enrolment codes lists your codes (the last four characters of each, how many devices it enrolled, until when, and whether it is in use, used up, expired or revoked). Revoke stops a code at once, for example when it may have leaked; the handhelds it enrolled keep working.
  • A handheld that is reinstalled and enrols again keeps its place in your licence: its old entry is retired by itself. After a reset to factory settings it does too when your device management sends the handheld's serial number with the code (ConsoleVision's Licence device ID); otherwise it takes a new place, and the old entry shows as away.
  • A handheld that hasn't been in touch for 30 days (lost, broken, or in a drawer) shows Away since that day, and its place in your licence is free for another handheld. When it comes back it takes a free place again by itself; if all are taken, the app on it says so until you retire one or buy more.
  • Retire a handheld you no longer use: it gets no new access from then on, and its place in your licence is free again.
  • Your licence decides how many handhelds may enrol at a place: a ConsoleVision trial five, a subscription as many as you bought. When that many are enrolled, the next one is refused and the app on it says so: retire one, or buy more under Products. Without a licence for the app at that place, no handheld enrols.
  • A handheld checks its licence by itself, also without a network: when it can't reach us (no network, a firewall, or our service down) it keeps working for 7 days, the first day without a word; then it shows a warning once a day with the day new sessions stop. Sessions already running are never stopped. Let the handhelds reach us at least weekly.
  • A subscription is billed per handheld you bought, monthly or yearly, whether or not each one is in use: retiring a handheld frees its place for another, it doesn't lower the bill.
What the handheld says What it means What to do
The enrolment code isn't valid (any more) The code is wrong, past its last day, revoked, or has enrolled its Devices at most Make a new code and push it to the handhelds
The licence allows N devices here, and they are all enrolled Your licence's limit at that place is reached Retire a handheld you no longer use, or buy the app
The organisation has no licence for this app at this place No trial or subscription of the app covers that place Start the trial or buy it under Products

Organisations

Welcome lists every organisation your account belongs to, with your role in each. An app opens in one organisation at a time; when you belong to more than one, the app asks which.

Your account doesn't belong to an organisation yet means nobody has added you. Welcome then offers three ways in:

  • Try a Vision app: Try a product (Try PrinterVision free for 30 days) to start a trial for your company. The product you came from is the first one.
  • Join your colleagues: when your company is on Vision Account with your mail domain, it shows below under Your colleagues are on Vision Account; otherwise ask one of its administrators to invite your address.
  • Have an invitation?: open the link in its mail while signed in with the address it was sent to.

CaptureTech's operators without an organisation of their own go straight to the Operators' console. To administer an organisation, open it in the menu on the left, under Your organisation.

Joining colleagues

  • By invitation: open the link in the mail. The page knows whether the invited address has a Vision Account: with one it offers Sign in to accept, without one Create your account, the other as a small link below, the address filled in either way. After signing in (the second step, Microsoft or a forgotten password included) you come back to the invitation: press Accept. A new account joins straight away once its code is in, and Welcome says You joined. An organisation that signs in with Microsoft only shows Continue with Microsoft first. Signed in with another address? Press Sign out, then sign in as the invited address, and the invitation opens again. Signed in with Microsoft but Microsoft didn't confirm your address? Press Send me a code and type the code we mail you; then you're in. The address may differ in capitals from your account's. An invitation works for seven days, once.
  • By your company's mail domain: when your organisation has proven its mail domain, Welcome shows it under Your colleagues are on Vision Account. Press Join, or Ask to join and wait for an administrator to let you in. Which of the two you see is your administrators' choice; they may also allow invitations only.
  • At sign-up: if your company is on Vision Account already with your mail domain, the company step says so and offers Join or Ask to join instead of starting a second one. Coming from an app's sign-in, joining takes you straight into the app.

When an organisation asks for one more step

An organisation can decide how its people sign in: only with Microsoft from its own directory, only with their Vision Account account, or either; and it can ask for a strong second step (a passkey, an authenticator app, or Microsoft with multi-factor sign-in). If the way you signed in isn't enough for that organisation, One more step for the organisation's name opens when you go into it:

  • Continue with Microsoft: sign in with your organisation's Microsoft account. It's added to the sign-in you already have; you stay signed in as yourself.
  • Your Vision Account password, then Continue: your own password, then the second step as usual.
  • Use your passkey or authenticator app: for an organisation that asks for a strong second step.
  • Open another organisation or Sign in with another account if this isn't the one you meant.

An invitation from such an organisation works the same way: press Accept and you're asked for the step first. Under "Microsoft only", an invitation sent to your Microsoft work address can be accepted after continuing with that Microsoft account, even if your Vision Account has another address.

Message Why What to do
That Microsoft account belongs to another Vision Account. The Microsoft account you chose signs in to someone else's account. Continue with the Microsoft account linked to yours, or sign out and sign in with the other one.
That Microsoft account isn't from a directory of this organisation. The organisation only accepts its own Microsoft directory. Choose your account of that organisation at Microsoft.
No Microsoft directory is linked yet. The organisation chose Microsoft only but hasn't connected its directory. Ask its administrator.

Managing your organisation

Your organisation is in the menu on the left for its administrators, under Your organisation (Your organisations when you administer more than one), each under its name. A user administrator sees Overview and People; an administrator everything; an auditor Overview and the audit trail. Each entry's pages are tabs at the top of the page; on a phone the tabs scroll sideways.

Set up your organisation, on Welcome and the Overview of a new organisation, lists the first steps: Add your sites, Invite your colleagues, Install the Vision Agent at a site, Verify your company's mail domain and Let your people sign in with Microsoft. Each one is a link to where it is done, and is ticked by itself once it is (an invitation sent, a domain verified), with how many are done. The list goes when every step is done; Hide puts it away in this browser.

Nothing is removed in one click. Remove, Switch off, Retire, Delete, Withdraw, Decline, Unlink, Stop and End now first open a short note right under the button saying what will happen, with Cancel and a red button that does it (Unlink and remove 2 domains, Stop the client). Nothing happens until you press the red one. On a phone the note opens at the bottom of the screen.

When something can't be done, the page says why next to the form you used (or at the top for a button in a list), in words about that form: an invitation to an address that is already a member, an operator's number that is taken, a place that can't go under the one you chose. Fix that and send the form again.

An older link to a page that has moved (Structure, Products) still opens the page it became. An address of a page that doesn't exist shows Page not found.

Overview

Set up your organisation while it is new, the numbers (People, Operators, Sites and Agents; each opens its page: Members, Operators, Sites and Devices), Waiting for you (people asking to join, support asking to come in, domains not yet verified, a subscription that needs you), your subscriptions and the latest activity, each with See all to its own page. A user administrator sees Invited and Asking to join instead of sites and agents; both open Invitations & requests.

People

Three tabs.

  • Members: everyone in the organisation with their role, and how many there are next to the title. Type part of a name or address in the search field and press Search; Show everyone clears it. Give a role on a person's row opens a small form over the list: a Role, At which place, then Give the role. Switch off stops someone from opening the organisation; Switch on lets them back. You can't switch yourself off, and the last administrator stays.
  • Invitations & requests: Invite someone: type their E-mail address, choose Whole organisation with a Role in the whole organisation (Member, User administrator, Administrator), or At a site with a Role there and where it holds (At), and press Send the invitation. Only the fields of the choice you picked show. You can only give a role up to your own. Withdraw cancels an invitation that hasn't been accepted. Under Asking to join, Let in or Decline someone who asked.
  • Operators: the people on the floor (see Operators on the floor above).

Sites

Sites, the tree of your companies, sites, buildings, areas and stations, with their time zone and country (see Your sites above), and Devices, the agents, stations and handhelds at your sites (handhelds: see Handhelds and fleet enrolment codes). Get the download asks What (Vision Agent: connects printers and cameras, or Station: where operators sign in) and For which site.

Subscriptions

Your organisation's products and their trials. Try … free for 30 days next to a product you don't have yet starts its trial, for the same people and sites. Extend by 14 days extends a trial once, also after it ended. A product shows here a moment after its trial starts. To buy a plan, follow talk to us under the products (see also When a trial ends above).

Sign-in & access

Sign-in method (see Sign-in: how your people sign in below), Mail domains and Roles (see Roles: who may do what, and where above).

  • Mail domains: type your company's Domain and press Add the domain. Add the TXT record shown to the domain at your DNS provider, then press Check now. It can take a few minutes, sometimes an hour, before the record shows. A public mail service (Gmail, Outlook and the like) can't be added, and a domain belongs to one organisation only. Next to it, Who may join, for people with an address on a verified domain: Only people we invite, They ask, an administrator lets them in, or They join by themselves, as members, each with a line on what it means. Press Save.

Security & support

Audit trail (see The audit trail above) and Support access (see When Vision Account support helps above).

Advanced

API clients (see API clients for your own systems above) and Export & close: exporting the organisation, and closing it (see Exporting and leaving below).

Sign-in: how your people sign in

Sign-in & access, Sign-in method in your organisation's menu is for its administrators.

  • Who gets in: choose Vision Account or Microsoft (the default), Microsoft only or Vision Account only, tick Require a strong second step if you want it, and press Save. Everyone of the organisation is asked to sign in the new way at their next step, and every administrator gets a mail.
    • Microsoft only needs a linked Microsoft directory first, and you choose it while signed in with Microsoft from that directory, so you can't lock yourself out. Guests of your directory sign in through it too.
    • Vision Account only waits until every administrator has a password and a passkey or authenticator app; the page lists who still needs them.
  • Microsoft directories: Link a Microsoft directory sends you to Microsoft, where an administrator of your company's directory (a Global, Privileged Role, Cloud Application or Application Administrator) agrees, and then signs in there to prove it. A Global or Privileged Role Administrator's sign-in also verifies their own mail domain for you. One directory belongs to one organisation; Details under it shows Microsoft's id of the directory, should our support ask for it. Unlink removes it, with the mail domains it verified (the confirm step says how many); it isn't possible while the organisation is on Microsoft only.
  • Members, under both: how each person can sign in today: whether they're on a verified domain, linked to Microsoft, and have a password and a strong second step. Look at it before you change Who gets in, so nobody is left without a way in. Keep as exception lets someone without your directory (an outside accountant, say) keep signing in with their password and a strong second step under Microsoft only; End the exception stops that. Ask to set a password mails someone a link to choose a password, and asks them to add a strong second step.

If Microsoft can't let your people in at all (an outage at Microsoft, a deleted directory), talk to us: Vision Account support can put your organisation back on Vision Account or Microsoft. Every administrator gets a mail with the reason, and it's in your audit trail. Administrators then sign in with their password and second step; without a password, use Forgot your password? on the sign-in page.

Message Why What to do
That would shut you out. The new way of signing in doesn't fit how you're signed in now. For Microsoft only, continue with Microsoft from the linked directory first; for a strong second step, sign in with one first.
Link a Microsoft directory first. Microsoft only needs a directory. Press Link a Microsoft directory.
Every administrator needs a password and a strong second step first. Accounts only would lock them out. Ask them to set one; Ask to set a password helps.
Microsoft didn't say this account may approve apps for the directory. The person who signed in at Microsoft isn't one of its administrators. Sign in at Microsoft as a Global, Privileged Role, Cloud Application or Application Administrator.
That Microsoft directory is linked to another organisation. One directory belongs to one organisation. Ask that organisation's administrator to unlink it, or talk to us.

For CaptureTech's operators

The Operators' console is only for CaptureTech staff who sign in with CaptureTech's Microsoft account and hold the operator role. It is in the menu on the left under CaptureTech, with its pages below it: its Organisations is every customer, while the organisations you administer yourself are under Your organisation higher up. An operator's own account needs no organisation. Everything you do here is logged under your name.

Page What it is for
Overview How many organisations are active, suspended or closing; the support visits open now and waiting; how many apps aren't taking their events; the products in the catalogue; Your support visits open now; Apps not taking their events; and What operators did lately (who, when in UTC, in which organisation). Each count opens its page: the active organisations Organisations, the support visits Support visits, the apps Apps and the products Catalogue. Type an organisation's name and press Find to look it up
Organisations Every organisation, found by part of its name and filtered by state (Every state, Active, Suspended, Closing), then Find; 25 to a page (Previous, Next), with its country, state, number of Sites and people. Each name opens the organisation's own page
An organisation Its Sites, Products and plans and Administrators, and everything you can do there: Support access, Sign-in, Suspend or Reactivate, and Move or split off a site
Support visits Every operator's visits: Open now, Waiting for approval, Ended or declined, with their times in UTC. Open goes into an organisation during your own open visit
Apps The Vision apps that sign people in here, with their state; Register an app adds one; each name opens the app's page
Catalogue The products for sale, their version and whether people can start a trial themselves; each name opens its document
Price lists The markets' price lists: their currency and countries; add one, or change a list's countries

An organisation's page

The page answers each form right beside it, and a refused form keeps what you typed.

  • Support access: give Why (5 to 500 characters; its administrators get it by mail) and Hours (1–8), and press Ask for support access. One of its administrators approves it, unless the organisation lets support in without asking: then you're in at once. While the visit lasts, the organisation shows in the menu on the left under CaptureTech, marked Support visit, and its name at the top of the page says so too; you work there under your own name, marked as support, and everything is in its audit trail. A suspended or closing organisation can't be visited.
  • Sign-in says how its people sign in. When Microsoft can't let a Microsoft only organisation in (an outage, a deleted directory), give Why and press Reset sign-in, then confirm: it goes back to Vision Account or Microsoft, every administrator gets a mail, and the reset is in its audit trail under your name. On an organisation that signs in that way already, there is nothing to reset.
  • Suspend stops an active organisation everywhere, for example for an unpaid bill or abuse. Give Why, press Suspend, type the organisation's name under Type its name to confirm and press Suspend it. Nobody can sign in to it, and its apps sign its people out and stop their work for it within a minute. Nothing is deleted. A suspended organisation shows Reactivate instead: give Why and press Reactivate to bring it back. Both are in its audit trail under your name. One that is closing is on its way out already and can't be suspended.
  • Move or split off a site moves a company, site or other place with everything below it (printers, jobs, subscriptions billed there). Its people stay where they are. In steps:
    1. Pick the site under Site to move, choose Move into another organisation or Split off as an organisation of its own, and press Next. Change goes back to this step.
    2. To move it: find the other organisation by name and pick it, then pick the place there it goes under (only places that can hold it can be picked), and press Review. To split it off: give Its name and Its administrator's address (someone who has a Vision Account already), and press Review.
    3. Check the summary and press Move it or Split it off. The organisation's page then says where it went, with a link to that organisation.

Apps

  • Register an app: fill in Key (lower case, for example printervision; it can't change later), Name and Address (the app's own web address, starting with https), and press Register the app. The next page, The app is registered: copy its secret now, shows its Client id, Secret and Authority once, each with Copy: put them in the app's settings straight away, because only a fingerprint of the secret is kept. Reloading the page shows nothing. For the app's developers has the technical names. Done, back to Apps returns to the list.
  • An app's page shows its key, address and dates. Events address is where the platform sends that app what happens in its customers' organisations (a new site, someone who left, a changed sign-in rule); leave it empty for an app that fetches them itself, and press Save. When an app isn't taking them, the page says how many tries failed and what the last one said; the app gets everything it missed, in order, once it takes them again.
  • New secret makes a new secret and shows it once, after you confirm with Make a new secret. The old one stops working at once, so put the new one in the app first thing.
  • Switch off stops an app, after you confirm with Switch it off: nobody signs in to it any more and it can no longer call the platform. Its registration stays on record.

Catalogue and price lists

  • A product's page holds its Document: its features, plans (with their trial days, extensions and days of grace), add-ons and prices in cents. Change it and press Preview: the page shows the product as it will be sold (plans, add-ons, prices as money) and What changes against the version published now. If something is wrong, it lists what, and nothing is published.
  • To publish, press Publish under What changes, type the product's key under Type … to confirm, and press Publish. It becomes the product's next version, and customers who have the product get their licences again at once. A plan or add-on left out is no longer sold; customers who have it keep it.
  • On Catalogue, New product with Its key and Start its document begins a product that isn't sold yet.
  • Price lists: a product's prices name the list they are in, so make the list first. Give Key (lower case, for example eur-dach), Currency (three letters, such as EUR) and Countries (two-letter codes, separated by commas), and press Save the price list. An existing key changes that list's countries; a list keeps its currency, so another currency is another list.

Messages on the console

Message What to do
That address doesn't name an organisation. / There's no such organisation (any more). Find it by name on Organisations.
It isn't active (suspended or closing), so nobody works in it now, support included. Reactivate it first if that is right, or help its administrators another way.
That isn't its name. Type the organisation's name exactly as it shows at the top of its page (upper or lower case doesn't matter).
Give the reason… Fill in Why: it goes to the organisation's administrators or its audit trail.
There's no Vision Account with that address. The new organisation's administrator needs a Vision Account first; ask them to make one, or give another address.
That kind of place can't go under that one. Pick another place: a company goes under the organisation, a site under a company or division, and so on.
That key is taken already. Choose another key for the app.
type … to confirm Type the product's key in the confirm step before Publish.
Licensing isn't connected The catalogue and price lists can't be read or published on this installation; ask whoever runs it.

Signed in as an operator, the Vision apps also open their own operators' pages to you (for example PrinterVision's firmware advisories). A customer's own data still needs an approved support visit.

Demo mode

On a demo installation, Sign in also lists the people of the demo world. Press one to sign in as that person without a password. Check your mail and Choose a new password show the code on the page, because no mail is sent. Noordhaven's Antwerp DC has a ConsoleVision trial for five handhelds, and a fleet enrolment code for them that is the same on every demo installation: CVE-DEM0-ANTW-ERP0-TC27.

Messages and what to do

Message What it means What to do
That address and password don't match. Try again. The address or the password is wrong. We give the same answer whether or not the address has an account. Check both and try again; the address stays filled in.
Too many wrong passwords. Try again in 10 minutes. Ten wrong passwords in a quarter of an hour lock the account for ten minutes, even for the right password. Wait ten minutes.
That code isn't right. Try again. The e-mailed code doesn't match the newest one we sent. Type the newest code. After five wrong codes you start again from Sign in.
That code isn't right. Type the code your app shows now. The authenticator code is wrong, or was used already: each code works once. A code sent at the very moment another one for the same account is being checked (two tabs, a double click) is turned away the same way. Wait for the next code and type it. If it keeps failing, check the phone's clock is set automatically.
Too many wrong codes. Try again in 15 minutes. Five wrong authenticator or recovery codes in a quarter of an hour lock them for fifteen minutes. Wait fifteen minutes.
That recovery code isn't right, or it was used already. Each recovery code works once. Use another code from your list.
That passkey wasn't accepted. Try again, or sign in another way. The passkey isn't on this account, or was removed. Use your password, or another passkey.
Too many tries Many tries from your network in one minute; we pause them for your safety. Wait a minute, then Go back and try again.
That took too long A page was open for a long time, or a form was sent twice, so it couldn't be accepted. Go back and try again: open the page again and send it once more.
Too many codes were sent. Wait a quarter of an hour. At most five codes per quarter of an hour, Send a new code included. Wait, then try again.
You are asked to sign in again, though you were signed in The app asked for a fresh sign-in, for something that needs one, or because your sign-in is older than it accepts. Sign in again; you go straight back to the app.
The sign-in took too long. Please sign in again. The second step must follow the first within ten minutes. Sign in again.
We couldn't check your browser in time… The quiet browser check didn't finish (scripts switched off, or a very old browser). Nothing was sent; what you typed is still filled in. Press the button again (Continue, Send the code or Send). If it keeps happening, switch scripts on for this site or try another browser.
You already have a Vision Account with this address. Sign in to accept the invitation. You tried to create an account from an invitation for an address that has one. Sign in with it (or press Forgot your password?); you come back to the invitation.
That took too long, so the code no longer works. The sign-up's code step waited more than ten minutes. Start again: we send a new code. Where you were going is kept.
First we need to check your address (on an invitation) You signed in with Microsoft, but Microsoft didn't confirm the address. Press Send me a code and type the code we mail you.
You asked to join … Your request reached the organisation; it isn't a membership yet. Wait for one of its administrators to let you in.
That code isn't right, or it has expired. The reset code is wrong or older than ten minutes. Check the newest mail, or press Send a new code.
The password is too short / too close to your e-mail address / one everybody tries. The new password doesn't meet the rules above. Choose another one.
Sign in again to change how you sign in. Your sign-in is older than a quarter of an hour. Sign in again, then make the change.
Signing in with Microsoft didn't work. Microsoft's answer couldn't be used. Try again, or sign in with your e-mail address.
A Vision Account has this address already. Microsoft doesn't confirm the address is your organisation's, so we don't link it on our own. Sign in with your password, then Link a Microsoft account under Account security.
You signed in to Microsoft as a guest of another organisation. A guest's address belongs to its own organisation, so the one you were a guest of can't confirm it. Sign in with your password, then Link a Microsoft account under Account security.
That Microsoft account is linked to another Vision Account already. One Microsoft account signs in to one Vision Account. Sign in with that account, or unlink it there first.
That's a throwaway mail service. Sign-up doesn't accept addresses from throwaway mail services. Use an address you keep, preferably your work address.
Please agree to the terms of use and the data processing agreement. The tick box on Your company wasn't ticked. Read them, tick the box and press Start the trial again.
First we need to check your address. Microsoft didn't confirm your address. Press Send the code and type the code we mail you.
You started 3 companies today already. One account starts at most three companies a day. Try again tomorrow, or talk to us.
The TXT record isn't there yet. The domain doesn't carry the record yet, or DNS hasn't caught up. Check the record at your DNS provider; try Check now again later.
Another organisation verified this domain already. A domain belongs to one organisation. If it's yours, talk to us.
Your role doesn't allow that. A user administrator manages people only, and gives roles up to their own. Ask an administrator.
This invitation no longer works. It was used, withdrawn, or is older than seven days, or the organisation is paused. Ask for a new one.
This invitation is for another address. You're signed in with a different address. Sign out and sign in with the invited address.
Your address isn't confirmed yet. The invitation needs a confirmed address. Press Send me a code, then type the code we mail you.
This account is switched off. An administrator has switched the account off. Ask your organisation's administrator.
No access Your account may not open that page. Ask your organisation's administrator.
That's a few messages in a short time. Talk to us takes five messages an hour from one person, address or network. We have them all; wait for our answer.
Type your name, an e-mail address we can answer and your message. A field of Talk to us is empty, or the address isn't one. Fill them in and press Send again.

Lost your phone, your passkeys and your recovery codes? Ask your organisation's administrator.

Coming next

Roles at a site (a user administrator for one site only) and requiring Microsoft for your mail domain come in a later release.

Getting help

Help at the foot of every page (at the bottom of the menu on the left when you're signed in) opens this guide, and Help at the top right of a page opens it at the section about that page; In this guide at the top links to each section, and every section has an address of its own to share. Talk to us sends a message to our support; we answer within a working day, by mail.

  • Signed in: choose the organisation it is About, type Your message and press Send. We see who you are and which organisation it is about, so you needn't explain.
  • Not signed in (you can't, or have no account yet): Talk to us at the foot of the sign-in page asks for Your name, E-mail address and Your message. We answer at that address. As on the sign-in page, your browser quietly checks itself while you type.

Exporting and leaving

  • Export the organisation (under Advanced, Export & close, administrators): its sites, people and their roles, operators, API clients, agents and the audit trail, as files. No password, PIN, badge or secret is in it, only that they exist. Each product exports its own data (labels, print jobs, inspections) from its own pages.
  • Close the organisation, on the same page (Advanced, Export & close, administrators): type its name under Type the organisation's name to close it and press Close the organisation. It stops at once for everyone (no app opens it, nothing prints for it), and every administrator gets a mail. 30 days later everything of it is deleted, in every product. Until that day any of its administrators can undo it on the same page with Keep the organisation, and everything works again as before. Invoices are kept as the law requires.
  • Your own account stays when an organisation goes: it is yours, and may belong to other organisations.

Talk to us