Account and security
Roles, access and account security
The company owner controls membership and sensitive subscription actions. Assign each teammate only the role needed for their work. Review access when someone changes jobs or leaves the company.
Give access deliberately
The company owner controls membership and sensitive subscription actions. Assign each teammate only the role needed for their work. Review access when someone changes jobs or leaves the company.
Protect sign-in
Sign in through your own email link and enable the offered second factor for your account. Keep recovery codes in a private location. Review active sessions and revoke one you do not recognize.
Handle sensitive actions
Check the company and record before editing billing, deleting an account or issuing a document. A hidden button is not proof of authorization; the server must enforce the role.
Important
Expected result and recovery
Each member sees only permitted actions. If access looks wrong or a session is unfamiliar, stop sensitive work, revoke the session and report the incident through the official support path.