People and roles

A vault can have more than one person in it. Each person has their own sign-in and one role, and every change they save is recorded under their name.

The roles

Role	Who it’s for	Can save changes	Can manage people
Owner	The people whose business it is	Yes	Yes
Staff	People who help run it day to day	Yes	No
Assistant	Claude, when it works on your vault	No	No

Owners do everything, including inviting and removing people.

Staff pack orders, log cards, list and price, and save their own changes. On their account page the People section shows as locked, with a note that only owners invite and remove people.

Assistant is the role Claude works under. It can read the vault and draft changes, and an owner or staff member saves them. See Using Claude with your vault. When you invite a person, make them an owner or staff.

Inviting someone

You need to be an owner.

1. Go to your account page at console.dotvault.net/auth. Under People you’ll see everyone in the vault.
2. Type the person’s name, pick owner or staff, and choose Create an invite link.
3. Copy the link and send it to them directly, in a message only they will read.

The link works once and lasts seven days. Until they use it, they show in the People list as “invite not accepted”. When they open it, they choose GitHub or Google, and that becomes their sign-in. Point them at Accepting an invite if they need a hand.

Removing someone

On the People list, choose Remove next to their name. Their sign-ins and their place in the vault are deleted, and they’re signed out the next time they load a page. The changes they saved stay in the ledger under their name, so the history still makes sense.

Removing someone who hasn’t accepted their invite yet withdraws the invite.

You can’t remove yourself, and a vault always keeps at least one owner: .vault refuses to remove the last one.

Changing someone’s role

For now, remove the person and invite them again with the new role.