People and roles

A workspace can hold more than one person, and each person has one of six roles. A role decides what that person can change. It never limits what they can see: every role reads everything in the workspace, including the settings.

The roles

What that means for the main actions:

A button a role cannot use is still shown, and answers with Permission denied when pressed.

Your role is on your profile page, with a one-line description of what it allows.

Two rules that hold whatever the role

• Nobody edits their own role or deactivates themselves. Another admin has to.
• The last active admin cannot be demoted or deactivated. A workspace always has someone who can change its settings.

Adding teammates

How it works once someone is added, because that part is live:

• An invitation is a link, not an email. The app doesn't email invitations, so an admin copies the link and passes it on. It works once and expires.
• Accepting it lands the person in the same workspace — same companies, deals and invoices — with the role the invitation carried. They set a password, or sign in with Google or Microsoft on the invited address.
• An invitation never creates a workspace, and signing up never joins one. Signing up always makes a new, separate workspace.
• One address, one account, across the whole deployment. An address already in use in another workspace cannot be invited.

Forgotten passwords

Everyone resets their own password: Forgot your password? on the sign-in page emails a link that works once, for an hour. Setting the new password signs out every other session on that account. See Create your workspace.

Admin-issued password links belong to the team screen, which isn't part of the current build.

Deactivating someone

Deactivating an account signs it out everywhere at once. Their past work — approvals, time entries, the audit trail — keeps their name. Reactivating lets them sign in again; it does not restore old sessions.