Give every team member exactly the access they need — no more, no less. Built-in RBAC means you don't have to trust everyone with everything.
Build your team freeEvery user in a workspace has exactly one role, set at the workspace level — the same person can be an Admin in one workspace and a Member in another. Roles are assigned when inviting users and can be changed at any time from workspace settings.
Access control is enforced server-side using the Casbin authorization library — not just UI hiding. Every API endpoint checks permissions before returning data.
Send an invitation to any email address. The invitee registers (or logs in if they already have an account) and lands directly in your workspace with the role you assigned.
Promote a Member to Admin or demote an Admin to Member at any time. The change applies on their next request — no re-login required.
Roles apply per workspace, not per account. A consultant who's a Member in your client's workspace can be an Admin in their own agency workspace — same login, different access.
Every permission change, login, and sensitive action is recorded in the audit log. Owners can review what changed, when, and by whom.
Each workspace runs against its own isolated database. Even a compromised Member account in one workspace cannot see data from another tenant.
Set up your workspace and invite your team — free to start.
Create free workspace