Growpad uses flat membership: every member of a customer can read and write every workspace under that customer. We deliberately avoid role hierarchies in v1 — they paper over team-structure problems instead of fixing them.
Inviting
Workspace → Team → Invite. Enter the work email; they get a magic-link email and land in the same workspace.
Removing
Same page. Removing a member instantly revokes their access; in-flight sessions terminate within ~60 seconds (refresh-token lifetime).
Authentication
Magic-link via Supabase. We don't run MFA enrollment or SAML — the magic-link flow is the only sign-in path. If you need SSO/SAML enterprise auth, talk to us; we'll discuss roadmap.