Team and roles
There are two roles. Almost everything is open to both; managing people and the safety rules is reserved for Administrators.
The two roles
Staff can chat, diagnose, approve commands (including the destructive ones), read tickets and write instructions. Administrator can do all of that and also manage the team and the organisation's settings.
| Only an Administrator can | Where |
|---|---|
| Invite, change the role of, or remove a user | Users |
| Rename the organisation and delete the account | Settings |
| Edit the never-allowed and always-ask lists, trusted categories and trust promotion thresholds | Security |
| Set an Autopilot instruction's trust level by hand | The instruction's own page |
| Change who may sign in with Microsoft | Settings |
Inviting and changing people
Open Users, type one or more email addresses and send. The invitation email explains how to sign in. New people join as Staff. Email addresses are treated in lower case so a capital letter cannot lock someone out.
Changing a role into or out of Administrator asks you to confirm, because it hands over or takes away full control of the account. Removing a user asks for confirmation as well.
Everything a person does here is recorded in the audit log under their name.