Team roles, profile and two-step login

Use individual logins

Sign in on the platform's main site, not the customer My Products page. Use the available email/password or Google sign-in flow. Account verification, password reset and invitation links depend on email delivery; request a fresh link if an old one has expired.

Keep profile details up to date. Profile lets you change first/last name and email, set or change a password and inspect linked Google sign-in. When available, Link Google connects it to your existing account. You cannot unlink your last remaining sign-in method: establish another working method first. The profile/account-menu Light, Dark and System choices affect your dashboard, not the design your visitors see. Never share the Owner's login to give somebody help-desk access. Customer access links and creator login credentials serve different purposes and are not interchangeable.

Two-step login

Use the two-step authentication screen to enroll an authenticator, confirm the setup and keep recovery codes somewhere secure and separate from the device. Follow any mandatory enrollment prompt before protected actions. Connection-secret changes and other sensitive operations can require this protection.

If you lose the authenticator, use an unused recovery code through the supported sign-in flow. Do not send codes or passwords to support. A screenshot that contains a QR setup secret or recovery codes is a credential leak, not ordinary diagnostic evidence.

Invite your team

Only the Owner manages Team. Invite a member with the appropriate Admin or Support role and have them accept using their own account. Pending invitations and active membership use the seat rules shown on that website's Team screen.

Admins manage content and marketing according to the available controls. Support members work tickets, read customer context and resend access but cannot issue refunds or manage the whole business. Owner-only areas include team, billing and data controls. The Owner cannot be removed or changed through the ordinary member-role picker.

Remove access safely

Cancel a pending invitation or remove a non-owner member when access is no longer needed. Review agent tokens separately: removing a human's membership is not a substitute for checking external client credentials. Rotate provider credentials in the provider if they were exposed, then update the connection safely.

A missing action

Check the selected website, your role, two-step enrollment and billing state before assuming the app is broken. Another website's record ID or link is not permission to open it. Ask the Owner for the appropriate role rather than sharing credentials or trying to bypass a restriction.