Skip to content
Exedra Gate docs

Team and roles

The four roles

  • Super admin. Full control of the workspace. This is the role stored as owner everywhere in the data and the API; "Super admin" is the label the product shows. Renaming the label did not rename the role.
  • Admin. Manages the team and all signing.
  • Editor. Prepares envelopes and places fields.
  • Member. View only.

You can assign admin, editor and member when inviting. The super admin role is not in the assignable list.

Inviting people

Invite from /app/issuer/team. An invitation is sent by email, has an expiry, and the recipient accepts at /accept-team-invite.

Seats are limited by your plan. When seats are full you either free one or buy more from the credits and billing surface.

The email domain allowlist

A workspace can restrict team invitations to a list of company email domains, capped at 20 entries. If the list is empty, invitations are unrestricted. This applies to team invitations only and never to investor invitations.

A refused invitation names the domains that would be accepted rather than failing vaguely. The browser checks first for a fast answer, but the server validates again and the server is what decides.

Membership is what authorises

Every team call names the workspace it is acting in, and the server re-verifies that id against your own memberships. A workspace id supplied by the browser is never an authorisation input.