Overview
Organization Members are the backbone of your operations. This section allows you to manage the individuals (staff, employees, or contractors) who have internal access to your organization’s dashboard.
Members vs. Sub-Accounts
It is important to distinguish between the two types of associated entities:
- Members: Staff or team members within your organization. They have broad access to data based on their assigned roles.
- Accounts (Sub-Accounts): These are separate related organizations (like divisions or clients). They only have access to content explicitly shared with them and cannot access your internal organization settings.
Understanding Roles & Permissions
The system uses a Role-Based Access Control (RBAC) model. When adding or editing a member, you can assign one or more of the following roles:
| Role | Key Permissions | Best For |
|---|---|---|
| Administrator | Full access to everything, including member management, financial settings, and organization profiles. | Owners, Senior Managers |
| Manager | Can manage product templates, publish content, and view reports. Cannot manage other members. | Department Leads |
| Member | Default access. Can manage their own created data and templates. | General Staff |
| Assistant (ca) | Read-only access to data and reports. Useful for executive assistants or external auditors. | Assistants, Accountants |
Inviting and Editing Members
Adding a Member
- Click the “+” (Add Member) button in the toolbar.
- Required Fields: You must provide a Full Name and a valid Email Address.
- Roles: Select at least one role. A member without a role will be unable to access most system features.
- Initial State: New members are created with “Access Enabled” (
isActive: true) by default.
Managing Existing Access
- Disabling Access: Members cannot be deleted from the system once added (to maintain audit trails for their past actions). To block a user, open their profile and toggle Access Enabled to OFF.
- Verification Status: Look for the
check_circleicon next to a member’s email.- Green: The user has successfully signed up and verified their account.
- Grey: The member has been invited but hasn’t created their login yet.
System Guardrails & Security
The Reactivation Rule
To prevent “flip-flopping” or unauthorized access cycles, the system includes a strict security middleware:
- If a member is marked Inactive, they cannot be set back to Active until 7 days have passed.
- Note: This check is bypassed for brand new accounts or in non-production environments.
The Super Administrator
The first user who signs up for an organization is automatically granted the “Master” status. This ensures that every organization has at least one person with the power to manage all other roles.
Best Practices for Team Management
Practice the “Principle of Least Privilege”
Do not grant the Administrator role unless strictly necessary. Assigning the Manager or Member role for day-to-day operations reduces the risk of accidental changes to sensitive organization-wide settings.
Regular Access Audits
Review your member list once a month. Ensure that members who have left your company are immediately toggled to Inactive.
Use Descriptive Mobile Numbers
While optional, adding a mobile number helps identify staff in environments where multiple people might share similar names, and provides an secondary contact method for urgent inventory issues.
Monitor “Visited At” Timestamps
Administrators can see the visitedAt field (visible in the member list). Use this to identify inactive accounts that may no longer require access.
The search bar in the member list uses an optimized “Debounce” feature. It waits 500ms after you stop typing to fire the search, keeping the interface snappy even with hundreds of team members.