Team
Invite people under Server > Team. An invite is a link, valid for seven days and usable once, where the person picks their own username and password.
| Role | Can |
|---|---|
| Viewer | See apps, deploys, logs and metrics. Secret variables stay hidden. |
| Developer | Everything a viewer can, and deploy, change apps, routes and variables, open container terminals, restore app backups. |
| Admin | Everything, including server settings, backups, team, updates and the server's terminal. |
| Owner | An admin who can't be removed: the person who set Layup up. |
Sign-in
Under Account, anyone can turn on two-factor sign-in with an authenticator app. Changing a password signs out every other session.
After repeated wrong passwords, sign-in from that address pauses for 15 minutes.
API tokens
Under Account > API tokens, create a token for scripts and CI. It acts as you, with your role: