Invite people

Your Gateway is invite-only: nobody can sign up unless you invite them. Everything below is under Manage workspace at the bottom of the Gateway's sidebar.

The workspace starts out named after you. Owners and admins can rename it: select Rename at the top of Manage workspace, or run pnpm everyapp workspace rename "Acme Corp".

Invite someoneCopy Anchor Link

1. Open the Users tab and select Invite user.
2. Enter their email and choose a role:
   • Member opens the apps they're given.
   • Admin can also invite people and manage apps.
3. Select Invite.

If your Gateway can't send email, it shows an Invite link instead. Copy it and send it to them yourself. It expires after 72 hours. Set up email

If your Gateway offers Continue with Google (or Microsoft, GitHub, Apple, your SSO), the person you invited can use it with the invited address instead of the link. Sign in with Google and others

Behind Cloudflare Access, run pnpm everyapp access on again after inviting someone. Access keeps its own list of who may pass, and only your Cloudflare login can change it, so the Gateway can't add them for you. To stop doing this for people at your company, let your whole domain through once: pnpm everyapp access on --email-domain yourcompany.com. When you invite someone

Choose who can open an appCopy Anchor Link

A new app is private to owners and admins. To share it, open the Apps tab and the ⋯ menu next to the app.

• Manage access picks people one by one.
• Edit app, then Available to everyone, opens it to every member, including people you invite later.
• The Groups tab gives a set of people the same apps at once.

When someone forgets their passwordCopy Anchor Link

If your Gateway sends email, they can select Forgot password? on the sign-in page.

If not, open the ⋯ menu next to them in Users, select Password reset link and send it to them. It expires after an hour.

Remove someoneCopy Anchor Link

Open the ⋯ menu next to them in Users and select Deactivate user. They're signed out everywhere and can't sign back in. Reactivate user undoes it. Owners and admins can also Delete user; only an owner deletes an admin or another owner.

OwnersCopy Anchor Link

Whoever claimed the Gateway is its first owner, and a workspace can have several: an owner opens the ⋯ menu next to a member or admin and selects Make owner. Owners are equals, so any owner can change another owner's role, deactivate or delete them, but never themselves, and never the last owner: the workspace always keeps one. From a terminal, pnpm everyapp workspace role <email> owner does the same.

Send emailCopy Anchor Link

Optional. With email set up, invites and password resets go out by email. Apps that send mail, like reports or notifications, use the same sender, so setting it up once serves them too.

1. In the Cloudflare dashboard, go to Compute & AI, then Email Service, then Email Sending. Select Onboard Domain, choose your domain, then Add records and onboard.

2. In your every-app folder, run:

   Copy Text

   pnpm everyapp secret set EMAIL_FROM EMAIL_FROM_NAME

   When asked, enter the address to send from, like noreply@yourcompany.com, and the name people see, like Your Company. The values aren't shown as you type.