Account
Teams
Organisations, members, roles, assigning a server to a person, and revoking access.
Everything belongs to an organisation. When you sign up, a personal one is created for you; you may never think about it again. A team is the same object with more than one person in it.
Roles
| Role | Can |
|---|---|
| Owner | Everything, including the licence and deleting the organisation |
| Admin | Invite, assign servers, revoke, read the audit log |
| Member | Use the servers assigned to them |
Assigning a server
A server belongs to the organisation and is assigned to one person. The platform passes that person’s device public keys on to the machine; nobody else’s. Each key only gets in once a device the server already trusts allows it: the person themselves for their own devices, an owner or an admin for a member’s. See your key.
Reassigning a server brings the new person’s devices up under Devices to allow, in the app of an owner or an admin whose device already opens that server. The old keys stay until then, and leave as soon as a new one is in. If no owner’s or admin’s device opens that server, take it back from the host’s console with sudo pupitred keys reset.
Inviting
An invitation is an email with a link. The person accepts, signs in, and installs the app; their first device generates its own key. Nothing is shared, and no password is passed around.
Revoking
Removing a member removes their devices’ keys from every server they were on. The revocation reaches a machine on the agent’s next outbound check-in — it is not a connection the platform opens. But the agent never removes the last key of a server: on a server that was assigned to that member, their keys are usually the only ones, and they stay until another is allowed in.
The audit log
Who invited whom, who assigned which server, who revoked what, and when. It records actions taken in the console. It does not record what happens inside your servers: the platform never sees that.
Servers of a team
The free servers and the licence belong to the organisation, not to its members: everyone in it shares the same servers, and a member who leaves takes none of them away. See licence.