Team & roles

Pushrail workspaces are multi-user. You can invite teammates, assign roles, and remove members from Settings → Members. Team management is available on every plan; the level of role granularity depends on which plan your workspace is on.

Inviting a teammate

Open Settings → Members → Invite. Enter the invitee's email address and choose a role, then send. Pushrail emails the invitee a link they can use to accept; no further action is required on your end.

Invite links expire after 7 days. If the invitee hasn't accepted by then, open the pending invitation in Settings → Members and click Resend to send a fresh link. You can also Revoke a pending invitation at any time before it is accepted.

A pending invite does not consume a seat or count as a member until the invitee accepts.

Accepting an invite

The invitee follows the link in the email and lands on the accept page, where they enter a password to join the workspace. A brand-new user chooses a name and sets a password; their account and workspace membership are created in one step. An existing user enters their current Pushrail password to confirm. Either way, the accept page always requires a password — there is no session-based one-click accept.

After accepting, the new member lands in the workspace and can switch between any workspaces they belong to from the account menu.

Roles

Pushrail has four workspace roles. Which roles are available depends on your plan.

On Free, Base, and Growth

Three roles are available:

| Role | What they can do | |---|---| | Owner | Full access. Can manage destinations, invite and remove members, change roles, and update billing. | | Admin | Same as Owner except cannot remove or demote other Owners, and cannot change billing. Effectively a co-admin. | | Team member | Read/write access to destinations, routing rules, schemas, transforms, API keys, and replay. Can view delivery logs, audit log, and usage. Cannot manage the team, billing, or delete the workspace. |

Owners and Admins are the only roles that can invite, remove, or change roles for other members — this applies on every plan.

On Scale and Enterprise (RBAC)

Scale and Enterprise unlock the Viewer role and granular per-resource permissions.

| Role | What they can do | |---|---| | Owner | Full access (same as above). | | Admin | Same as above. | | Team member | Read/write access to destinations, routing rules, schemas, transforms, API keys, and replay. Cannot manage the team, billing, or delete the workspace. | | Viewer | Read-only access: can view delivery logs, audit log, and usage. Cannot create or modify destinations, routing rules, or any other configuration. |

Granular per-resource permissions (e.g. restrict an Admin to specific destinations) are also available on Scale and Enterprise.

Removing a member

Open Settings → Members, find the member, and choose Remove. The member loses access immediately. Their past audit log entries are preserved.

Last-owner protection: if a workspace has only one Owner, that Owner cannot be removed or demoted. Promote another member to Owner first, then remove or demote the original.

Multiple workspaces

A single Pushrail account can belong to more than one workspace. Use the workspace switcher in the account menu to move between them. Each workspace is fully isolated — events, destinations, keys, and delivery logs never cross workspace boundaries.

Who can manage the team?

Only Owners and Admins can invite, remove, or change roles for members. This rule applies on every plan. Team members and Viewers can view the member list but cannot make changes.