Inviting team members and setting roles

Available roles

Tendmere has three user roles:

• Owner — Full access including billing, team management, and data deletion. There must always be at least one owner.
• Manager — Full access to properties, tenants, finances, compliance, and documents. Cannot manage billing or delete the workspace.
• View-only — Read access to the permitted workspace areas without create, edit, or delete actions. Use this for a passive reviewer; accountants should receive the finance-scoped Accountant role when they need to maintain finance or tax records.

How to invite

Go to Settings → Team and tap Invite member. Enter their email address and select a role. They'll receive an email with a link to join your workspace.

Changing roles

Owners can change any member's role at any time from Settings → Team. Role changes take effect immediately — no need to re-invite.

Removing members

Tap a member's name in the team list and select Remove. They'll immediately lose access to the workspace. Their historical actions (e.g. expenses they logged) are preserved in the audit log.

Security note

Role-based access is enforced at the database level via Row Level Security. Even if someone inspects the app's network requests, they cannot access data outside their role's permissions.