Team and User Management
Admins invite people by email from the dashboard. An invite is a one-click sign-in link, so nobody sets a password. You can also add someone without sending an email.
Roles and Permissions
Section titled “Roles and Permissions”Every user has a role that determines what they can do within an organization. Roles are assigned per-organization, so a user can be an admin in one organization and a viewer in another.
| Role | Permissions |
|---|---|
| Admin | Full access. Manage users, servers, applications, domains, status pages, and organization settings. |
| Manager | Manage servers, applications, and deployments. Generate runner tokens. Cannot manage users or settings. |
| Developer | Deploy applications and manage environment variables. Cannot manage infrastructure or users. |
| Viewer | Read-only access to everything. Cannot modify anything. |
Only admins can add, remove, or change user roles.
Adding Users
Section titled “Adding Users”Navigate to the Users section in your dashboard and click Invite user.
Enter the person’s email address, select a role, and click Send invite.
What happens next:
- Reoclo emails the address a link that is valid for 48 hours and works once.
- The invitee opens the link and is signed in to your organization. New users enter their name first. There is no password and no separate email confirmation step, because opening the link proves they own the address.
- If the address already belongs to a Reoclo account (the person is in another organization), the invite adds your organization to that account. They see it in their organization picker.
- Pending invites appear in the Users list. You can resend or revoke them there. A revoked, used, or expired link no longer works.
An address can have one pending invite per organization. Pending invites count toward your organization’s member limit.
Add Without an Invite Email
Section titled “Add Without an Invite Email”Turn on Skip invite email to add the user right away. Reoclo sends no email. The person signs in at app.reoclo.com/login with their email address and the code Reoclo sends there. See Sign Up and Sign In.
Changing User Roles
Section titled “Changing User Roles”Go to Users in the dashboard, click the user you want to modify, and select a new role from the dropdown.
The role change takes effect immediately. The user’s next request will use the new permissions. If they are currently logged in, they may need to refresh the page to see updated UI elements.
Removing Users
Section titled “Removing Users”Go to Users, click the user you want to remove, and click Remove User.
What happens:
- The user loses access to your organization immediately.
- If the user belongs to other organizations, those memberships are unaffected.
- The user’s global account is not deleted. They can still log in to other organizations where they have active access.
- All user management actions are audit-logged.
Multi-Organization Access
Section titled “Multi-Organization Access”Users can belong to multiple organizations. When a user logs in:
- If they have exactly one organization, they are redirected to that organization’s dashboard automatically.
- If they have multiple organizations, they see an organization picker where they choose which organization to access.
Switching Organizations
Section titled “Switching Organizations”Users with access to multiple organizations can switch between them from the dashboard sidebar. Click the organization name in the top-left corner to open the organization switcher.
Each organization is completely isolated. Data from one organization is never visible in another. When you switch organizations, you are working in a completely separate environment with its own servers, applications, domains, and user list.
Troubleshooting
Section titled “Troubleshooting”Invitee Cannot Sign In From the Invite Link
Section titled “Invitee Cannot Sign In From the Invite Link”Cause: The invite expired after 48 hours, was already used, or an admin revoked it.
Fix: Resend the invite from the pending invites in Users. If you added the user with Skip invite email, ask them to request a sign-in code on the login page with the same email address.
Invite Email Did Not Arrive
Section titled “Invite Email Did Not Arrive”Cause: The email went to spam, or the address has a typo.
Fix: Ask the invitee to check their spam folder. If the address is wrong, revoke the invite and send a new one.
User Does Not See the Organization After Being Added
Section titled “User Does Not See the Organization After Being Added”Cause: The user is logged in with a session from before they were added.
Fix: The user should log out and log back in. The organization picker will show the new organization.
Role Change Did Not Take Effect
Section titled “Role Change Did Not Take Effect”Cause: The user’s browser cached the old permissions.
Fix: The user should refresh the page or log out and log back in.
Cannot Remove a User
Section titled “Cannot Remove a User”Cause: You do not have the admin role.
Fix: Only admins can remove users. Ask an admin to remove the user.
User Sees “Access Denied” on Resources
Section titled “User Sees “Access Denied” on Resources”Cause: The user’s role does not have permission for the action they are attempting.
Fix: Check the user’s role in Users. Viewers have read-only access. Developers can deploy but not manage infrastructure. Managers can manage servers and apps but not users. Upgrade their role if they need broader access.
Next Steps
Section titled “Next Steps”- Access Control and Security: Learn how Reoclo enforces organization isolation and role-based permissions
- Server Management: Add and manage your deployment targets
- Deploy Your First Application: Get your code running on your servers