Getting started
Profile and access
Every workspace user has one of three roles, and password recovery always goes through a verified OTP challenge rather than an unauthenticated reset link.
How it works
- Forgot password runs identify → verify the emailed code → set a new password, in three labeled steps
- Resend mints a fresh code, resets the clock and attempts, and stops after five resends
- Every user is OWNER, ADMIN, or MEMBER — the badge shows yours, but enforcement is deliberately narrow
Good to know
- A forced reset path exists for cases where a temporary password must be replaced before continued access
- Profile changes and role assignment are workspace-scoped and don't cross tenant boundaries