Roles
- Owner — can do everything, including billing, domain settings, deleting the brand, managing team. Only owners see provider credentials in plaintext (after re-auth).
- Member — can compose campaigns, manage contacts, run integrations, view analytics. Can't see provider credentials, change billing, or remove members.
Invite a member
Brand settings → Team → Invite member → email address + role. Maillayer:
- Generates a one-time invitation link.
- Sends it to the invitee via your configured provider (so it shows up properly branded in their inbox).
- The link expires in 7 days.
Accepting
Click the link → if you don't have a Maillayer account, sign up; if you do, log in. Either way, you join the brand's team after auth.
Per-brand membership
Team membership is per-brand. Inviting [email protected] to Brand A does NOT give her access to Brand B in the same install. Each brand's owner invites their own team.
Removing access
Brand → Team → row → Remove. Their session is invalidated immediately. Any invitations they sent stay valid until accepted or expired.
Audit trail
Every send, every integration trigger, every campaign launch is logged with the actor's email + timestamp. Useful for compliance + figuring out "who fired the welcome email blast at 3 AM".