People and admins

Choose who’s on your team and who can manage it.

Add your team

An admin invites each teammate by their email. Until abloh IDE ships, book a call and GLAD's founders set your team up and send its invites with you. Once it does, the team's first admin sets the team up from inside abloh IDE and sends invites from its Team page, as in Set up a team. Each teammate who joined by invite opens the invite link, signs up or logs in, connects GitHub, then runs glad login . and glad arm . in their checkout, as in join your team.

Admins

Whoever creates the team is its first admin. A team always keeps at least one admin. Who is an admin is kept with your team at GLAD’s issuer, and your service follows it. Today GLAD’s founders grant and remove the role for you.

Taking access away

A teammate is removed from your team at GLAD’s issuer; today GLAD’s founders do it for you. Their service refuses them once their current login runs out, within the hour. Their decisions are retained in the graph after removal.

Signed requests

Every call to GLAD is signed by the machine that made it. Nobody can record a decision in someone else’s name.

A service not registered with a team

A service that no team at GLAD’s issuer knows is joined by its address. An admin adds each teammate by their GitHub login, and each teammate then logs in to it.

$ glad admin team add <github login>
$ glad login --service https://glad.example.com

A teammate without GitHub gets a login key instead. It adds them to the team, is shown once, and works on every machine that person uses.

$ glad admin key --for <name> <email>
$ glad login --service https://glad.example.com --key <key>

On such a service, admins and access are managed on the service itself. Grant the admin role to anyone on the team, or remove it:

$ glad admin role grant <who> admin
$ glad admin role revoke <who> admin

A removed teammate is refused from their very next call. To cut off just one of their machines, revoke that machine’s credential. Their other machines keep working. To remove an admin, remove their admin role first.

$ glad admin team remove <who>
$ glad admin revoke <credential id>