Team and roles
Invite people and give each one of five roles.
On this page
Invite people to your workspace and give each one a role. Roles decide what a person can see and do, and every check happens on the server, not just in the interface.
The five rolesLink to this section: The five roles
| Role | What it can do |
|---|---|
| Owner | Everything, including approving spending and purges |
| Administrator | Everything except approving spending |
| Developer | Edits sites, runs AI tasks and deploys |
| Operator | Deploys and looks after servers and backups |
| Viewer | Can look at everything they're allowed to, but change nothing |
Inviting peopleLink to this section: Inviting people
Owners and administrators invite people from Team, choosing their role. Each person accepts from their invitation link and signs in with their own email and password.
Approving each other's requestsLink to this section: Approving each other's requests
Nobody approves their own request, except owners: in a one-owner workspace there's nobody else to ask. See Approvals and spending limits.
Two-factor sign-inLink to this section: Two-factor sign-in
Turn on two-factor sign-in for everyone who can approve spending or launches. Platform administrators must use it.
The audit logLink to this section: The audit log
Every change is recorded with who made it and when. Secret values never appear in the audit; keys are recorded by name only.