Clients
Create clients and control Member access.
Client access depends on effective Team access.
| User access | Client result |
|---|---|
| Company Owner | Implicit write access to every active client in every Team. |
| Team Owner or Team Admin | Implicit write access to every active client in that Team. |
| Company Admin with Full access | Implicit write access to every active client in that Team. |
| Team Member | Only clients with an explicit read or write grant. |
Do not create explicit client grants for Full access users. Their implicit access is shown as protected in Command Centre.
Use Command Centre
- Select the Team.
- Open Team > Clients.
- Enter a name and select Create client when needed.
- Open a client row.
- Add a Member and choose Client Viewer or Client Editor.
Client Viewer maps to read. Client Editor maps to write. Write includes
read.
Maintenance commands
Create a client:
npm run team:client -- create --team <TEAM_SLUG> --slug <CLIENT_SLUG> --name "<CLIENT_NAME>" --by <AUTHORIZED_ACTOR_EMAIL>List clients:
npm run team:client -- list --team <TEAM_SLUG>Grant read access:
npm run team:client -- grant --team <TEAM_SLUG> --client <CLIENT_SLUG> --user <MEMBER_EMAIL> --access read --by <AUTHORIZED_ACTOR_EMAIL>Grant write access:
npm run team:client -- grant --team <TEAM_SLUG> --client <CLIENT_SLUG> --user <MEMBER_EMAIL> --access write --by <AUTHORIZED_ACTOR_EMAIL>List client grants:
npm run team:client -- grants --team <TEAM_SLUG>Revoke access:
npm run team:client -- revoke --team <TEAM_SLUG> --client <CLIENT_SLUG> --user <MEMBER_EMAIL> --by <AUTHORIZED_ACTOR_EMAIL>Client grants affect npm run team -- clients, memory search, memory ingest,
and file sync.
The direct maintenance command accepts only an active direct Team Owner or Team
Admin for --by. It does not resolve Company-level Full access. Company users
should use Command Centre or the hosted API instead. Hosted API requests use
the authenticated user and do not trust an actor ID from the request body.
Next: Skill grants