When a developer or agency only needs to work on one of your sites, invite them to that site instead of to your whole account. They get their own login and see that one site, nothing else.
To give someone a role across every site on the account, invite them to the account instead.
Before you start
Only the account's Owner or an Administrator can invite people to a site or remove them. See roles and permissions.
What a site member can and cannot do
On that one site, a site member can:
- see the site, its logs and its analytics;
- deploy;
- change its settings: domains, environment variables, PHP version, cron jobs, SSH access, databases and mailboxes;
- run, restore and download backups.
They cannot:
- see or change billing, or switch paid add-ons (such as staging or extra backups) on or off;
- approve, discard or roll back a held release;
- change the public status page, the private-site gate or redirects;
- invite or remove other people;
- delete the site;
- see any other site on your account.
If they need release approvals or the visibility settings too, give them the Developer role on the account instead. That role covers every site.
Invite someone
- Open Sites → your site → Settings.
- Under Team, find This site only. Enter their address in Invite by email and choose Invite.
- The page confirms Invite sent to their address and how long the link is valid. Until they accept, the invite is listed with invite pending and its expiry date.
What they do
They open the link in the email, which shows Join and your site's name.
- Already have a veldhost login with that address: they choose Sign in first, sign in, then open the link again and choose Accept invite.
- New to veldhost: they enter Your name, Choose a password and choose Create account & accept. No plan or payment is involved; the site's billing stays with you.
They land on the site with Welcome aboard — you now have member access to your site. They should then set up two-factor sign-in on their own Security page. If your account requires two-factor sign-in (on Settings → Team), that applies to people you add to a single site too: until they set it up, they are sent to their Security page and their API tokens and connected assistants are refused.
If the link has expired or got lost, invite the same address again. The new email replaces the old invite, and the old link stops working.
Remove someone or cancel an invite
Caution: removing a site member ends their membership at once, and SSH keys they added for this site are deleted and stop working shortly after. Change any passwords or secrets they could see: mailbox passwords, database passwords and secret environment variables.
- Open Sites → your site → Settings → Team.
- Next to the person, choose Remove, then Remove from site. For an invite that hasn't been accepted, choose Cancel. The link they were sent stops working.
If their role on your account still gives them this site (Owner, Administrator or Developer), removing them here leaves that access and their SSH keys in place, and the page tells you so. Change it on Settings → Team.
Remove people the day the work ends.