Your team
Invite people to your 9in account with a role (owner, admin, developer, support, viewer) and, if you like, only some tenants.
Several people can work on one 9in account. Each signs in with their own 9in account, and you choose what they can do. Open Team from the menu under your avatar in the console.
#Roles
| Role | Tenants they open | Configuration | Users' personal data | Create / delete tenants | Team | Billing |
|---|---|---|---|---|---|---|
| Owner | all | change | change | yes | everyone | yes |
| Admin | all | change | change | yes | everyone except owners | no |
| Developer | all or chosen ones | change | read | no | no | no |
| Support | all or chosen ones | user-related settings only | change | no | no | no |
| Viewer | all or chosen ones | read | none | no | no | no |
| Billing | none | none | none | no | no | yes |
- Configuration is everything about a tenant: applications, sign-in methods, connections, tokens and keys, branding, themes, texts, custom domains, webhooks and integrations. Support sees only the user-related part: sign-in identifiers and methods, two-factor policy, password and username rules and custom profile fields.
- Users' personal data is user profiles, their sessions, the sign-in activity log and webhook delivery payloads. Viewers see statistics (counts and charts), never people.
- Secrets are never readable after they're created, for anyone: the console shows only whether one is set. Revealing a shared-secret signing key needs permission to change the configuration.
- The person who created the account is always an owner. Only owners invite or change owners and billing members.
The console hides pages a role can't open and shows "view only" where it can't save, and the server checks every request: each action has a set permission, and anything without one is refused.
#Inviting people
Choose Invite people, enter one or more email addresses, a role and which tenants they can open: All tenants (including ones created later) or Only some. 9in emails each person a link that works for 7 days. They sign in to the console with that address, or create a 9in account with it, and accept. You can also copy the link and send it yourself; it only works for the invited address.
Pending invitations can be sent again (with a new link) or canceled. Owners and admins invite people; only owners invite or change other owners.
#Working on several accounts
People who belong to more than one account switch between them at the top of the Tenants, Team and Plans & Billing pages. The tenant switcher lists tenants by account, and a tenant page shows the account and your role when it isn't yours.
#Changing or removing people
On Team, open a member's menu to change their role or tenants, or to remove them; the change applies to their next request. Anyone can leave a team from the same menu. The tenant's activity log records who made each change in the console.
#Billing
The plan, its limits and invoices belong to the account, not to the people on it: tenants created by team members count toward the account's plan. Only owners see Plans & Billing.