--- title: "Invite your team and secure your account" description: "Invite people to a MachineMail organization, set roles, add passkeys, turn off email codes, sign out other sessions, and switch, create or delete organizations." canonical: "https://machinemail.dev/docs/guides/team-and-security" --- # Invite your team and secure your account > Invite people to a MachineMail organization, set roles, add passkeys, turn off email codes, sign out other sessions, and switch, create or delete organizations. Source: https://machinemail.dev/docs/guides/team-and-security Everything on this page happens in the dashboard, on [Settings](https://machinemail.dev/app/settings) and in the organization switcher. The API side, with the member and invitation routes, is in [Organizations and pods](https://machinemail.dev/docs/concepts/organizations-and-pods#members). ## Invite people Owners and admins can invite. Members see the list but can't change it. Open [Settings → Members](https://machinemail.dev/app/settings#members) and choose **Invite**. Enter the person's **Email** and pick a **Role**. Only owners can invite someone as an owner. Choose **Send invitation**. They get an email with a link to sign in and join. The link works for 7 days. Your plan includes a number of seats. Members and pending invitations both count. When you reach the limit, **Invite** is turned off and a note names your plan's limit. Everyone already in the organization keeps access. An owner can change plans under [Billing](https://machinemail.dev/app/billing). ### Pending invitations Invitations that haven't been accepted are listed under **Pending invitations**, with the role, when each was sent and when it expires. - **Resend** emails the invitation again. - **Revoke** stops the link from working. Type `DELETE` and choose **Revoke invitation**. You can invite the person again later. Only owners can resend or revoke an invitation for the owner role. ## Roles | Role | Can | | ---------- | -------------------------------------------------------------------- | | **Owner** | Everything an admin can, manage owners, and delete the organization. | | **Admin** | Invite people, change roles and remove members. | | **Member** | Use the organization, but not manage people. | To change someone's role, pick a new one from the list in their **Role** column. Admins can't change or remove owners. An organization always keeps at least one owner. The **Sign-in** column shows how each person signs in, with their latest method first. ### Remove someone or leave - **Remove** on a person's row takes them out of the organization. Type `DELETE` and choose **Remove member**. - **Leave** on your own row takes you out. Type `DELETE` and choose **Leave organization**. To come back, someone has to invite you again. Access ends at once. API keys the person created (CLI keys too) are revoked, apps they connected are disconnected, and invitations they sent are revoked. Keys with no recorded creator stay: review them on [API keys](https://machinemail.dev/app/api-keys). ## Secure your account The **Security** panel is at [Settings → Security](https://machinemail.dev/app/settings#security). These settings belong to you, not to the organization. Each person adds their own passkeys. Some changes need a recent sign-in. The dashboard then shows **Confirm it's you**: confirm with a passkey or with a code emailed to you. You won't be asked again for 10 minutes. ### Add a passkey A passkey signs you in with your fingerprint, face or device PIN instead of an emailed code. 1. Choose **Add a passkey**. 2. Follow your browser's or password manager's prompt. The passkey appears in the list with when it was added and last used. **Synced** means your password manager keeps it on all your devices. Use **Rename** to give it a clearer name, or **Remove** to delete it. Removing a passkey signs out every session it signed in. ### Turn off email codes With at least one passkey, you can turn off **Email sign-in codes**. MachineMail then sends no code or link to your address, and you sign in with a passkey only. Single sign-on and social sign-in keep working. While codes are off, you can't remove your last passkey. Turn codes back on or add another passkey first. If you lose every passkey while codes are off, contact [support@machinemail.dev](mailto:support@machinemail.dev). ### Sign out other sessions Choose **Sign out other sessions** to sign out of MachineMail everywhere except this browser. Use it after you lose a device. ## Switch or create organizations One person can belong to several organizations. The organization switcher is the organization's name at the top left of the dashboard. - **Switch.** Open the switcher and pick an organization. A check marks the one you are on. The others show your role in them. - **Create.** Choose **New organization**, enter a **Name** and choose **Create organization**. You become its owner and the dashboard switches to it. ### Organization settings [Settings → Organization](https://machinemail.dev/app/settings#organization) holds the settings everyone in the organization shares: - **Name**: edit it and choose **Save**. The **Slug** and **Organization ID** can't be changed. - **Undo send**: dashboard sends wait 5 seconds so you can undo them. See [Approve drafts](https://machinemail.dev/docs/guides/approve-drafts#undo-a-send). - **Default inbox**: the inbox listed first wherever the dashboard lists inboxes. ## Delete an organization Only owners can delete an organization, and only from the dashboard. It deletes every inbox, message, domain, webhook and key, and every claimed agent. There is no undo. A paid plan has to be cancelled first, under [Billing](https://machinemail.dev/app/billing). If it isn't, the delete dialog shows an error with **Go to Billing**. A plan set to cancel at the end of the period still counts until then. Open [Settings → Danger zone](https://machinemail.dev/app/settings#danger-zone) and choose **Delete organization**. Type the organization's name. Capitals don't matter. Choose **Send code**. MachineMail emails you a 6-digit code. It works once, for 10 minutes. Choose **Send a new code** if it doesn't arrive. Enter the code and choose **Delete organization**. Your session moves to another organization you belong to. If there is none, you are signed out. [Deleting an organization](https://machinemail.dev/docs/concepts/organizations-and-pods#deleting-an-organization) lists what is deleted and what stays. > **Not in the dashboard:** There is no screen to set up single sign-on, to manage pods, or to delete your personal account. Pods are managed with the API. For single sign-on or account deletion, contact > [support@machinemail.dev](mailto:support@machinemail.dev). ## Troubleshooting | Symptom | Fix | | ------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | | **Invite** is greyed out | You've reached your plan's seat limit. Revoke a pending invitation, remove someone, or change plans. | | There is no **Invite** button | You are a member. Ask an owner or admin. | | **Owner** is missing from the **Role** list | Only owners can make someone an owner. | | **Add a passkey** is missing | This browser can't create passkeys. Try another browser or device. | | The **Email sign-in codes** switch won't turn off | Add a passkey first. | | There is no **Danger zone** | Only owners see it. | | Deleting fails with a billing error | Cancel the paid plan under **Billing**, and delete once the plan has ended. | ## Related - [Organizations and pods](https://machinemail.dev/docs/concepts/organizations-and-pods) - [Authentication](https://machinemail.dev/docs/reference/authentication) - [Connect an agent without code](https://machinemail.dev/docs/guides/connect-an-agent)