List invitations
Every invitation, newest first, with the link of each one still open
Create invitation
Invite somebody into a role. An open invitation to the same address is withdrawn first, so this is also how one is sent again. Refused for an address that already has an account
Revoke invitation
Withdraw an invitation. Its link stops working at once. Nothing is deleted: it stays in the list as withdrawn
Read invitation
What an open invitation is for: the address, the role and the station. Changes nothing
Start accepting invitation
Check the password and start setting up the second step. Nothing is saved, and starting again replaces the setup
Accept invitation
Accept: make the account with its password, its second step and its role, all at once, and spend the invitation
List users
The station's people, one page at a time, ordered by when their account was made
Get user
One person, with every way they sign in, where they are signed in and their recent sign-ins
Change user role
Give a person a different role. They hold exactly one, so the role they had is taken away. Refused for your own account, and for the last admin
Deactivate user
Switch a person off. They are signed out everywhere and cannot sign in, and their API keys, connected apps and chat links stop working, until they are switched back on. Nothing is deleted. Refused for your own account, and for the last admin
Reactivate user
Switch a person back on. They sign in as they did before, and their API keys, connected apps and chat links work again
Sign out user
Sign a person out everywhere. They can sign straight back in
Reset user MFA
Remove a person's authenticator apps and passkeys and sign them out everywhere, for when they have lost the device. They sign in with their password and set a new one up