Manage sign-in, users and permissions

Every app you generate comes with sign-in and access control. You manage the people who use your app from the project’s Users view. The people who sign in to the Platform itself with your account are a separate audience.

How access works

Authentication answers “Who signed in?” People sign in to your app with their email address and a six-digit code, and the app knows who they are. Authorization answers “May this person do this?” It comes from permissions, so a successful sign-in does not grant everything.

Each project has two apps, Preview and Production. They keep their own people, organizations, groups, permissions and settings. Within one app, access builds up in layers:

• Users hold permissions that you grant to them one by one.
• Default permissions give a permission to everyone in a class, such as every member of an organization.
• Groups bundle permissions and give them to all of their members.
• Organizations, also called organization entities, are your customers. They have members and owners, and organization-bound permissions apply only inside one organization.

Quick path

1. Open the project and choose Users. Pick Preview or Production.

   

2. Invite a test user, or edit an existing user’s name, role or sign-in state.

3. Open the user’s permissions and review what they hold and why.

4. Adjust defaults, groups or organization membership if many people need the same access.

5. Sign in to the app as that test user and try an allowed action and a restricted one.

6. Repeat in Production before you open the app to real users.

A person can sign in and still see “Access denied”. That means the sign-in worked and a permission is missing.

For Task Grove, a member should update an assigned task while a manager can manage the team’s projects. Put that in the story, then check it with a member and a manager.

Pages in this section

Sign-in and scope

• How your app’s users sign in
• Choose Preview or Production users

People and permissions

• Invite, edit and remove users
• Grant and restrict permissions
• Set default permissions

Organizations and groups

• Manage organizations and members
• Give permissions to groups
• Understand your team’s managed access

Production, overview and problems

• Configure production sign-in
• Review everyone who uses your apps
• Access controls inside your app
• Troubleshoot access problems

Use organization management when customers need separate workspaces. Pro supports independent production sign-in; see publishing. An agent can do the same work through the MCP user, permission and organization tools.

Application example

Category: Project and task management. Example: Task Grove, a task board for a small team.