Spell for Teams allows you to manage users in your organization via the web console. This is done via the user management panel under Settings.
To add a user to the organization, click on the "Add Member" button at the top of the screen.
Each email address will receive an email containing a link to set up their account. You may invite multiple users at once by providing a list of email addresses in a comma-delimited or semicolon-delimited format. Invitations never expire and may be cancelled at any time.
If you are a member of multiple organizations, you will be logged into all of those organizations simultaneously and will be able to switch between them at any time.
In the web console, click on the organization name in the sidebar to see a dropdown menu of your organizations. Click on a different organization to switch to that one.
In the CLI, run
spell owner to see a list of your organizations. To switch to a different organization, run
spell owner NAME.
Managing user permissions
There are three tiers of membership in a Spell organization:
- Member—members are regular users of the platform. Members can create, manage, and delete cluster resources—SpellFS resources, runs, workspaces, etcetera. Note that this includes resources that they do not own.
- Manager—managers get additional user management and cluster configuration permissions.
- Admin—admins additionally get access to billing. There must always be at least one admin in the organization.
Managers can only promote other users up to the rank of manager, or demote managers to members. Admins can promote or demote users to any rank. Managers and admins can demote themselves, subject to the restriction that there is always at least one admin in the organization.
Managers and admins can remove users from the organization. Click on the
... icon to bring up the extended menu and then click on "Remove".
The last admin account in the organization cannot be removed.
Viewing account authentication types
Spell accounts may be authenticated using either their email and password or using the Sign In With Google integration. Users in an organization can see the authentication settings of their peers using the "Auth" column in the users table: Spell logo for email and password, Google logo for Sign In With Google.
Sign In With Google authentication enables single sign-on and two-factor authentication, making it advantageous for security-conscious organizations. This feature allows organization managers and admins to verify the account type of their users and tell them to migrate, if needed.