Inviting and managing team members

Only subscriber_admin users can invite, edit, or remove other users — this is enforced at the API level, not just hidden in the UI, so it can't be bypassed by calling the API directly either.

Inviting someone

Go to Settings → Users → Invite, enter their email/name, and pick a role:

• subscriber_user — day-to-day access to the platform's tools, no user management or billing access.
• subscriber_admin — everything subscriber_user has, plus user management, billing, and brand settings.

They'll receive an email with a secure, single-use link valid for 7 days to set their own password and finish setup — there's no temporary password emailed to anyone, ever, by design (a password sitting in plaintext in an inbox indefinitely is a real, avoidable risk).

Removing access

Removing a user immediately revokes all of their active sessions, not just their ability to log in again — so a removed user's existing browser session also stops working straight away, rather than staying valid until it naturally expires.