Adding people and what they can do

Open the admin panel (the Admin Panel button in the header — only shown to an account owner or a domain manager) to add people and set what they can do.

Adding someone

Only the account owner can create new accounts, under Create New User:

1. Enter a Username and starting Password (at least 10 characters).
2. Choose Account type:
   • Team member — access is set per domain, below, after creating them.
   • Account owner — full access to everything on this instance.
3. Optionally fill in Email on record — it's never required, but without one they can't use "Forgot password?" and will need you (or, on some domains, a domain manager — see below) to add it later or reset their password directly.
4. Select Create User.

Finding someone in the list

The account owner sees everyone in Users & access. A domain manager only sees people who already have some access on a domain they manage — not everyone on the instance, which would get unwieldy once there are unrelated customers on other domains. To give someone their first access on a domain you manage, use Find a user: type their exact username or email and select Find — this works even if they don't show up in your list yet, as long as the account already exists (an account owner still has to create it first, under Create New User).

What each access level means

Each person's card shows a domain only once they have some access on it, so it doesn't grow into one card per domain on the whole instance. To give them access on a domain they don't have one for yet, use Add access on another domain under their existing cards, pick the domain, then set its level below and select Save.

For every domain you manage, you set each team member's access with one of these radio options (an account owner already has every level on every domain, so these only apply to team members):

• No access on <domain> — they can't see or send from any mailbox on it.
• Some mailboxes on <domain> — pick specific mailboxes with the checklist that appears; they can only read and send from those.
• All mail on <domain> — every mailbox on that domain, including ones created later (a new address on the domain just starts working for them automatically).
• Can manage <domain> — everything "All mail" gives them, plus managing the domain itself: creating and deleting mailboxes, mailbox signatures, locking the mailbox list, and giving or removing other people's access on that domain. Only the account owner can grant or remove this level — a domain manager can't promote someone else to domain manager, or demote one, even on their own domain.

Select Save after changing someone's access.

Email on record (for "Forgot password?")

Under each person's card, the account owner can always set their Email on record. A domain manager can set it too, but only for a team member whose access is entirely within domains that manager manages — if the person also has access elsewhere, only the account owner can set it (the card says so). The person's card also flags it plainly — No email on record — they can't reset their own password — whenever it's empty, so it's never a silent gap.

It's used only so the person can reset their own password with the "Forgot password?" link on the sign-in page (see Getting started & signing in) — leave it blank and they'll need the account owner to reset their password for them instead.

Resetting someone's password directly

The account owner can also set a new password for anyone directly, under Reset Password on their card (at least 10 characters) — useful if they don't have an email on record, or can't get to it right now.

Removing someone

Select the trash icon on a person's card to delete their account. This can't be undone. You can't delete your own account this way.