Members

Add people to a team, give them a role, and remove them later.

Everything in Deplo belongs to a team. A person joins a team as a member with a role, which is a named set of capabilities.

There is no email invite, because Deplo does not send mail. There are two ways in:

  • The person already has an account: add them to your team directly.
  • The person has no account: an instance admin creates a registration link and sends it to them.

Add somebody who already has an account

Open members settings

Open Settings -> Members.

Settings -> Members: the member list with roles and permission counts

Add a member

Click Add member.

Search, pick, assign

Search by username, pick them, choose the role, then Add to team.

The Add a member dialog, picking a registered user by username

They see your team in their team switcher immediately.

Invite somebody new

This needs an instance admin.

Open users settings

Open Settings -> Users, in the system section.

Create the user

Start Create a new user and follow the wizard.

Deplo creates a single-use link. It works once and expires in 24 hours.

Share it

Share this link with them over a channel you trust.

They open it, choose a username and a password, and land in their own team. Then add them to yours from Settings -> Members.

Pending links are listed on the same page and can be revoked before use. An admin can copy a link again from the list during its 24 hours.

Roles and limited access

Each member row shows their role. Two badges to know:

The same members as a table, role per person at a glance
  • Primary owner is the team's founder. Nobody can remove, demote or edit them, not even instance admins. Ownership is transferred only from Settings -> Members -> the member -> Advanced, by the owner, to a member of that team, after entering the password and second factor again.
  • Limited access means their real access is changed by folder shares, so the role name alone does not say everything.

Open a member to see Permissions (their role and the scope tree), Advanced (instance admin, transfer ownership, remove), and Activity (what they did).

A member whose permissions were edited by hand no longer follows their role. Assign them a role again from the member page or the API to put them back on it.

Remove somebody

From the member's Advanced tab. Their membership ends, their sessions in that team stop working, and their API tokens lose the access they got from them. Their account and their own team are not touched.

Two more things happen, so adding them back later starts clean:

  • Every folder share and per-app grant they had in this team is revoked.
  • Folders they owned pass to the primary owner, so they do not disappear from everyone's Overview. This is written to Activity, and the primary owner can share the folder again.

Good to know

  • A team always keeps somebody who can manage it. No role edit or removal can leave zero holders of manage_members, manage_roles or manage_team.
  • Teams are isolated. Adding somebody to this team gives them nothing elsewhere.
  • Servers are shared between teams. An instance admin decides on the server which teams may deploy to it.
  • Two-factor can be required for the whole team. A member who has not set it up sees nothing in that team. See Account security.

Troubleshooting

  • The user search finds nobody: they have no account on this instance yet. Use a registration link.
  • A registration link says used or expired: create a new one.
  • They are in the team but see nothing: the team requires two-factor and they have not set it up, or their role has almost no capabilities.

See Sign-in and access for more.

Next steps

Did this page help you?

On this page