Skip to content
14-day refund · Free plugin on WordPress.org
Yatra
Try free Get Yatra Pro →
Yatra Pro · Agency Security & operations

Stop sharing the admin login.

Give every team member exactly the access they need — and nothing more.

Granular roles + capability-based access for multi-staff travel agencies. 8 built-in roles, custom role builder, magic-link invitations, time-windowed access for contractors, per-trip scope filtering, and an append-only audit log. Defense-in-depth: every action gated on the server, not just hidden in the UI.

You stop paying for $30+ / user / mo IAM tools
Get Team & Access — Agency plan Read the docs

Single payment per year · 30-site license · 14-day refund · One Pro license unlocks every module on this tier.

Team & Access — Yatra WordPress travel booking plugin (Agency Pro module)

Why Team & Access matters for tour operators

Tour operators with 2+ staff usually share the WordPress admin login because building granular roles in WP-core is a nightmare. That means your seasonal guide can refund bookings, your accountant can delete trips, and your marketing freelancer can read every customer's phone number. Standalone IAM tools (Auth0, Okta, Cloudflare Access) start at $30+ per user per month — overkill for a 5-person agency. Yatra Agency bundles a travel-shaped IAM layer at the same plan price as the rest of Pro.

What changes once Team & Access is on

Concrete operational outcomes — not feature checkboxes.

  • Hire a seasonal guide without giving them the keys to the kingdom — restrict to their specific departures.
  • Know exactly who refunded which booking, who changed which price, who deleted which trip — audit log for everything sensitive.
  • Add a contractor with access that auto-expires on a date you pick — no "did I remember to revoke?" anxiety.
  • Let your accountant see financials without exposing customer PII.
  • Let your marketer build campaigns + email automation without booking access.
  • Send a magic-link invitation by email — no manual account creation, no shared password.

What Team & Access unlocks in Yatra

Every surface, every toggle, every audit trail — covered.

8 built-in roles

Owner, Manager, Sales Agent, Front Desk, Guide (scoped), Accountant, Marketing, Read-only Auditor. Each role is a pre-curated capability set covering common travel-business jobs.

Custom role builder

Build your own roles from a categorised capability matrix. Start blank, or use a template (Customer Support, Reservations Agent, Tour Operator Lead, Finance Reviewer, Content Writer, Volunteer / Intern).

Magic-link invitations

Email a one-shot magic-link to anyone, even people who've never visited your site. 256-bit token, sha256-hashed, IP-rate-limited, expires automatically. They click, set a password, and they're in.

Time-windowed access

Set an "expires on" date on any member. Caps auto-revoke when the date passes. Built for contractors, seasonal staff, freelancers, audit-period vendors.

Per-trip scope filtering

Restrict any non-admin member to specific destinations, activities, trips, or categories. The restriction applies at the database level — they literally can't see what's outside their scope.

Append-only audit log

Every sensitive action (refund, cancel, delete, role change, invitation, settings change) is logged with actor + IP + user-agent. 180-day default retention, exportable.

Bulk operations

Select N members → change role, force logout, remove from team, set expiry, all in one click. Capped at 200/request with per-id success/failure reporting.

Module-disable safety toggle

Choose what happens to your team's access if you ever turn off the module: keep it running (default, safe), or wipe every Yatra role on disable (destructive, recoverable).

The SaaS this replaces

Same capability. Without the monthly bill or the data middleman.

Tool
Their pricing
The catch
Auth0 / Okta (per-user IAM)
$30+ / user / mo
Plus complex setup to scope per-trip.
WordPress role-editor plugins
Free–$50 / yr
Generic caps, no travel concepts, no audit log, no expiry.
Custom RBAC build
$8k–$25k one-time
Per-agency engineering work, ongoing maintenance.
Yatra Pro · Agency plan
One yearly payment. Every module included.
No catch. Your data stays on your WordPress.

How to set up Team & Access in Yatra

No engineering. Open Yatra → Modules, toggle, follow the wizard.

  1. 1

    Enable the module

    Yatra → Modules → Team & Access → toggle on. Agency tier only.

  2. 2

    Add your first team member

    Team & Access → Members → Add existing user, Create new user, or Send invitation by email.

  3. 3

    Pick a role

    Choose from 8 built-in roles or create a custom one. Optional: scope the member to specific trips / destinations.

  4. 4

    Optional: set an expiry

    For contractors / seasonal staff, set "Access expires on" date. Auto-revokes on schedule.

  5. 5

    Audit anytime

    Audit log tab shows every sensitive action with actor, timestamp, IP, and result.

Pay once for the agency tier, run unlimited team members on every client site.

Replaces (Auth0/Okta per-user IAM)
$1,800+ / year for 5 staff
Plus integration work to scope per-trip.
Yatra Pro · Agency Yearly (sale)
from $499 / year
Includes this + White Label + Channel Manager + 15 more modules. 30 client sites. Unlimited team members per site.
Yatra Pro · Agency Lifetime
$1,999 one-time
15 client sites. Pay once. Updates + support forever.

Team & Access — Yatra Pro FAQ

Want to feel Team & Access in action first? Try Yatra Pro free →

Can I limit a user to specific trips only?
Yes. Scope filtering lets you restrict any member to specific destinations, activities, trips, or categories. The restriction applies at the database query level — they literally cannot see bookings, trips, or reports outside their scope.
What happens when a contractor leaves?
Set their expiry date when you hire them. Caps auto-revoke when the date passes — you never have to remember to remove them. If they leave early, manually remove them from the Members tab or use the bulk-remove action. Their WordPress user account is preserved (they may have other non-Yatra access on the site).
Does the free Yatra plugin have this?
No. Team & Access is an Agency-tier Pro module. The free plugin gives the standard WordPress administrator full access to everything — fine for solo operators. Team & Access is for agencies and tour operators with multiple staff who need granular roles.
How do I see who refunded a booking?
Open Team & Access → Audit log. Every refund (and cancel, delete, role change, settings change, etc.) is recorded with the actor, timestamp, IP, and result. Filter by action="booking.refunded" to see all refunds.
What if a team member tries to do something they're not allowed to?
They're blocked at the server level (not just the UI). The denied attempt is logged in the audit log so you can see who tried what. The UI also mirrors the caps — they won't see buttons / menus they can't use, so the denied attempts mostly come from URL-poking or third-party API calls.
Can I customize the invitation email?
Yes. Yatra → Email → Templates → Team invitation. Edit the subject and HTML body with the standard merge tags (site name, role label, accept URL). It respects your White Label branding too — the email shows your brand, not "Yatra".
What happens if I turn off the Team & Access module?
Your choice. The Settings tab has a toggle that controls disable-behavior: leave it ON (default) and your team keeps their access if you turn off the module; turn it OFF and disabling wipes every Yatra role from your site. Either way, the audit log is preserved, and the WordPress administrator always keeps full access.
Does this work on Multisite?
Yes — Team & Access settings are per-site on Multisite. Each site has its own team, roles, and audit log.

Add Team & Access to your tour-booking website today.

Yatra Pro · Agency tier · Yearly or Lifetime · Agency only

Get Team & Access — Agency plan Compare all plans

14-day refund · One license unlocks every module on your tier.