Platform
Every teammate, exactly the access they need.
Invite by email with a role, build custom roles from a fine-grained permission catalog, and revoke with effect on the next request. Shared logins become a story you tell new hires.
Sound familiar?
The shared admin password
One login, five people, zero accountability. Invites with named roles make every action attributable.
Everyone is an owner
The intern who can refund anything is an incident waiting. Fine-grained permissions mean refund rights are a deliberate grant.
Offboarding that lags
Access that lives in a login token stays valid after the goodbye email. Permissions resolve per request. Removal is immediate.
Roles built from real permissions
01Email invitesInvite with a role; pending invitations are visible, revocable, and expiring.
02System rolesOwner, admin, and member cover the common shapes, immutable, so nobody edits the floor away.
03Custom rolesCompose roles from a code-first permission catalog, orders, inventory, pricing, audit, with escalation guardrails built in.
04Enforced in the UINavigation hides what a role can't use; actions refuse what it can't do. The permission check isn't cosmetic.
05Immediate effectChange a role and the next request already sees it, no re-login, no token refresh window.
06SSO-awareMap identity-provider groups to workspace roles and let access follow your directory.
From invite to revoke
- 01Invite by emailName the role at invite time; they accept and land in the right shape.
- 02Tune with custom rolesPick the exact permissions for the box office, the merch team, the accountant.
- 03Revoke without dramaRemove the member or change the role. The next request enforces it.
Invite your team properly
Roles and permissions, live in the demo workspace.