Skip to content
Jiayang Cloud Docs

Members and invitations

Members are the people in a workspace. Each has one role: member, admin or owner. Workspaces and roles says what each can do.

Owners and admins manage the member list. Only an owner can add an owner, or change or remove one.

Add someone

Section titled “Add someone”
Terminal window
jiayang workspace add acme dana@example.com
dana@example.com is a member of acme.

Dana gets an email with a link to the workspace in the dashboard. They sign in with a code sent to that address. There is no password to set.

--role picks the role. The default is member:

Terminal window
jiayang workspace add acme dana@example.com --role admin

To change someone’s role, run jiayang workspace add again with the new one. A role change sends no email and doesn’t count against the plan.

A member who isn’t an admin or an owner gets this when they try:

error: You don't have permission to do that.

The invitation email

Section titled “The invitation email”

The subject is “You’ve been added to a workspace on Jiayang Cloud”. The email says who added them, to which workspace and as what, for example “ana@example.com added you to the workspace Acme as a member.” The link is the workspace’s page in the dashboard.

A workspace sends at most 50 invitation emails a day, and one person sends at most 100 a day across all their workspaces. Sharing an app counts too. Past either budget, the membership still takes effect and no email goes out. The dashboard tells you when that happens, so you can send the link yourself. The audit log records each invitation as mail.sent, or mail.skipped when a budget was spent.

List the members

Section titled “List the members”
Terminal window
jiayang workspace members acme
owner   ana@example.com
member  dana@example.com
member  sam@example.com

jiayang workspace show acme shows your own role, the plan, the allowed email domains and the container apps the plan runs:

acme (Acme)
your role: owner
plan: free
allowed email domains: any
container apps: none on this plan

Remove someone

Section titled “Remove someone”
Terminal window
jiayang workspace remove acme dana@example.com
Removed dana@example.com from acme.

Every grant Dana had on the workspace’s apps goes with the membership. Their access ends within a minute, open connections included. The audit log’s member.remove entry lists the apps they lost. The bypass tokens Dana made are refused from their next request and marked revoked, each with a token.revoke in the log.

Some removals are refused:

You see Because
error: A workspace needs at least one owner. They are the last owner. Make someone else an owner first.
error: They're the only owner of an app here. Make someone else its owner first. An app would be left with no owner. Share it with another owner first.
error: not found: dana@example.com isn't a member of acme, or acme isn't a workspace you're in They aren’t a member, or you aren’t.
error: You don't have permission to do that. You’re a member, or an admin removing an owner.

Leave a workspace

Section titled “Leave a workspace”

Anyone can leave, whatever their role. Remove your own address:

Terminal window
jiayang workspace remove acme ana@example.com

The last owner can’t leave, and neither can the only owner of an app:

error: A workspace needs at least one owner.
error: You're the only owner of an app here. Make someone else its owner first.

Limit who can join

Section titled “Limit who can join”

Allowed email domains keep a workspace to your company’s addresses:

Terminal window
jiayang workspace domains acme example.com,example.org
Members and sharing are limited to: example.com, example.org

The list applies in three places:

  • Adding a member at another domain is refused: This workspace only allows members from its allowed email domains.
  • Sharing an app with another domain is refused: This workspace only shares with its allowed email domains.
  • The edge checks it on every request. Members and grants at other domains stay listed, but within a minute they can’t open any app in the workspace. That includes you, if your own address is outside the list. Bypass tokens made by anyone outside the list are revoked.

A list has up to 20 domains, each a hostname like example.com. Anything else gets Allowed domains are up to 20 hostnames, like example.com. A domain matches exactly: example.com doesn’t let in mail.example.com.

To let any domain in again:

Terminal window
jiayang workspace domains acme --clear
Members and sharing are open to any email domain.

Plan limits

Section titled “Plan limits”

Every member counts against the plan, owners included: 3 on Free, 25 on Team and 200 on Business. At the limit, adding one more is refused:

error: This workspace has 3 members, which is all the Free plan allows. Remove one, or upgrade: Team allows 25 members. Billing: https://app.jiayang.cloud/w/acme/billing

People you only share an app with, as viewers, aren’t members and don’t count. See Limits for the rest.

In the dashboard

Section titled “In the dashboard”

Go to the workspace’s Members page.

  • Add people opens a dialog for an email and a role. Add sends the invitation.
  • The role menu on each row changes a role. Admins see Member and Admin; owners also see Owner.
  • The remove button on a row takes that person out. On your own row it leaves the workspace.

Allowed email domains are under Settings, one domain per line. When a new list would shut out current members, the dashboard names them and asks you to confirm.

Section titled “Related”