A system for managing risk in employee travel may control access by users to the travel risk management system. The travel risk management system may receive and store company information for a client company subscribing to the travel risk management system, and allow activation code packages to be defined for allowing a specified number of activation codes to be generated for the subscribing client company. Once the activation code packages are defined, the specified number of activation codes may be generated and assigned to employee's of the subscribing client company. The system may provide for defining super admin users authorized to input client company information and define activation code packages, and client admin users authorized to select activation code packages, and generate and assign the activation codes to users.