Roles & members: who can sign in

Steps

1. Open Roles & members under Organisation in Admin. Each row shows name, email, an admin or developer chip, and Linked or Not linked.
2. Bring colleagues in by having them sign in with your organisation's email address - their first sign-in lands here. A full workspace turns them away.
3. Change what someone sees with Access on their row. Sees: shows their reach and whether it is a grant. Pick Grant: their team's deals or Grant: the whole book, or Follow the workspace default. A grant only widens - the floor is Everyone sees on General.
4. Wall a recruiter with Limit to clients… and tick the clients they may recruit for. Admins are never walled.
5. Let someone mint API tokens with Make developer. Tokens never exceed their own reach. Remove developer withdraws it.
6. Release sign-in when a login was deleted and recreated. The next sign-in with that email takes over the account and history; permissions do not change.