Team

The /team page lists every user under your tenant, active members and pending invites, with their role, status and last login. Every role can see it; inviting, changing roles and removing users are admin-only.

Roles

Three tiers cover the common needs (full breakdown on the overview):

• admin — everything, including managing other admins.
• developer — read everything, mint and manage test-mode keys.
• viewer — read-only.

The platform does not stop an admin from demoting the last remaining admin, so keep at least one admin at all times.

Inviting a teammate

1. Click Invite, enter the email address and pick a role.
2. The dashboard emails a setup link of the form dashboard.drukverify.com/setup?invite=<token>.
3. The invitee sets a password, enrolls TOTP and saves backup codes, the same flow as initial-admin setup, pre-bound to the role you picked.

Pending invites stay listed until setup completes and can be revoked from the same page. Invite tokens expire after 7 days; re-inviting issues a new token.

Changing a role

Pick a new value from the role dropdown on a row. The change takes effect on the user's next request; existing sessions stay signed in.

Removing a user

Removing a user archives the account: the row shows Archived and the user can no longer sign in. API keys are not tied to dashboard users, so keys they created keep working; revoke them separately on /keys if needed.

You cannot remove yourself. The API refuses it with 403 forbidden.

Sessions

Signing in from several devices at once is allowed; each sign-in is its own server-side session that lasts 12 hours. Sign out ends the current one. The dashboard API also lets an admin revoke every active session of a user in the tenant, and lets any user revoke all of their own.

Last login

The team list shows each user's last dashboard sign-in, which is the practical signal for who no longer needs access.