Team access

Team access gives separate logins to the people who work in your workspace — a manager, an operator, a bookkeeper, an assistant. Each of them signs in with their own email and sees only what their role allows. A workspace has one owner: the person who pays for the plan and is responsible for what their team does.

Inviting someone

1. Open Settings → Access and press Invite.
2. Enter the email, the role and, if needed, the models this person will work with. The email must be new to Bemetrix: one login — one workspace.
3. Press Send invitation. The link in the email is valid for 7 days. If the email doesn't arrive, copy the link in the same window and share it in a messenger.

If the person already has a card in Staff or Operators, invite them right from the card with Give access — the access is then linked to the card.

Roles and rights

Rights come from the role (Settings → Access → Roles). Each section gets None, View or Edit, and Money is separate: without it the person sees no amounts. A role can be limited to selected models. A user who can manage access can't give anyone more rights than they have themselves.

The plan, payments, purchases and promo codes stay with the owner. The Be assistant is available to users and answers within their role, and AI uses the owner's credits.

Suspend, close or delete

All of this is in the user list on the Access tab:

• Suspend — access stops at once, with no end date: a holiday, a check, a break. The login, role and history are kept, and Resume brings everything back as it was.
• Close access — the person no longer works in the workspace. The login is deleted after 60 days; until then you can bring the access back with Restore access.
• Delete now — owner only: the login is deleted within an hour and can't be restored.

The person's actions stay in the history after deletion, marked "login deleted". Deleting a staff or operator card also closes the access linked to it.

Two-factor authentication

On the Access tab the owner can turn on Require 2FA from users — it is off by default. Once it's on, a user without 2FA can't get into the workspace until they set it up: at sign-in they get a QR code for an authenticator app. Users who already have 2FA enter a code at sign-in. More in two-factor authentication.

If a user loses their phone, the owner or a user who can manage access presses Reset 2FA in that user's row. The person sets up 2FA again at their next sign-in, and the reset is recorded in the activity log.

If the workspace isn't paid for or is deleted

Users can work while the workspace has an active subscription. If it has ended or a payment failed, users see "The workspace is unavailable right now" and can't open any section until the owner renews the subscription. If the owner's account is deleted, every user's access is closed and their logins are deleted automatically.

Activity log

Settings → Activity log shows who changed what and when in the workspace: the owner, users, models and the system. Records are kept for 1 year; you can filter them by period, section, person and model and download them with Export CSV. A user sees the log within their own rights, and without Money the amounts are hidden.