Manage your app’s members

Your app’s members are the people who sign up to it or whom you add. Manage them in Database → Members, separately for development and live data. Passwords and sign-in tokens are never shown.

Roles and permissions

Every member has one role; member is the default.

1. Click Roles.
2. Add roles with a name used in code (admin, editor), a label and permissions (orders.read, orders.refund; * allows everything).
3. Click Save roles. A role that members still hold cannot be removed.

Change a member’s role in their details. Your app checks roles on its server: ask the builder, for example, “Add an admin page only admins can open”. It uses requireRole('admin') from the app’s sign-in kit; members can never change their own role.

Add members

• Add member → Invitation: they get an email with a link to choose their password (valid for 7 days by default). Turn off the email to copy the link and send it yourself.
• Add member → Temporary password: the account is ready at once; the password is shown to you once.
• Import CSV: one member per row with email and optionally name and role. Check first, then import, with or without invitation emails.

Invitation links need the app’s address: publish the app for live members, or open the preview for development members.

Help a member

Open a member to see their sign-in methods, devices and sessions, and what was done to their account. From the list menu you can:

• email a password reset link, copy a password link, or set a temporary password;
• mark their email address as confirmed;
• suspend (they can no longer sign in) and reactivate;
• sign them out everywhere;
• delete them, or erase them with their rows in your app’s tables and their uploaded files (the right to erasure).

Export CSV downloads the members with the current filters.

Your app’s emails

In Database → Emails set the sender name, a logo, the button and background colours, and the text of the invitation, email confirmation and password reset in each language. Use {app}, {name}, {url} and {days} in the text. The preview updates as you type; Send me a test sends one to you. When your app has its own email service set up, the same branding is used there.

Everything done to members is listed in Database → Activity, visible to everyone with access to the project.