Workspace admins
People
Open People in the admin console. You can search by name or email and filter by role or by state (active or deactivated).
Click a person to see their email, role, last seen time, whether they use a passkey and an authenticator app, their devices, and the channels they are in.
Roles
| Role | Notes |
|---|---|
| Owner | Full control. A workspace must always have at least one. |
| Admin | Runs the day-to-day. Cannot change owners. |
| Member | Regular team member. |
| Guest | Limited to chosen channels, with an end date. See Guests. |
Change someone's role
- Click the person.
- Under Role and access, choose the new role and click Change role.
- Confirm in the box that asks "Change ... to ...?".
- Confirm it's you if asked (see the admin console).
Rules:
- Only an owner can make someone an owner or change an owner's role.
- The last-owner rule: the last owner can never be demoted. Make someone else an owner first.
- When you turn a person into a guest, you must set an end date.
Change a guest's end date
Open the guest and set Guest access ends (up to a year ahead), then save. A guest's account stops working at the end date.
Edit name or title
Open the person, change Name or Title, and click Save profile.
Deactivate someone
Use this when someone leaves.
- Click the person.
- Under Account, click Deactivate.
- Confirm.
They are signed out at once and lose access to all channels and files. Their old messages stay. You cannot deactivate yourself or the last owner.
Reactivate someone
Open the person, click Reactivate under Account. They can sign in again with their existing two-step methods.
Reset someone's two-step verification
Use this when they lost their phone and have no recovery codes. Only an owner can do this.
- Confirm the person is who they say they are, for example in person or by a call you place yourself.
- Open the person. Under Sign-in methods, find Reset sign-in methods and click Reset.
- Confirm.
All their methods are removed and all their devices are signed out. At next sign-in they set up a new passkey or authenticator app and get new recovery codes.
Sign someone out everywhere
Open the person and click Sign out everywhere under Signed-in devices. All their devices are signed out. They can sign in again if they are still active.
All of the above is written to the audit log.