Roles
A reviewer is for a client or an editor who should see the work and say yes or no, but not change it. See Team review.
Only an owner can make, demote, or remove another owner. The last owner cannot be demoted, removed, or leave. The role is checked on every request, so a change or a removal applies at once, and a removed person’s tokens stop working.
Invites
An owner or admin invites someone by email and picks a role. The link in the email works once, for 7 days, and only for the signed-in account with that address. vfrey stores a hash of the address and of the token, never the address or the token itself.Several organizations
If your account belongs to more than one organization, the console header shows a switcher. On the command line, your sign-in is bound to one organization at a time.org use needs a token from npx vfrey login. A personal API token is bound to its organization and cannot switch. See Account.