# Team

Work on your apps together. Everyone signs in with their own passkey, and everything they do appears in **Activity** with their name.

## Roles

| Role | Can |
|---|---|
| Member | Deploy and manage every app, database, and domain of the team |
| Owner | Everything a member can, and invite and remove people |

## Invite someone

Owners open **Members** in the dashboard, or run `deplane team invite colleague@company.com`. Deplane gives you a link to send them yourself. It works once, only for that address, for 7 days. When they open it and press **Join**, they set up a passkey and are in the team.

Revoke an unused invitation from the same page. Removing a member stops their access to the team right away and revokes their tokens for it.

Your plan sets how many people a team can have, counting open invitations: 1 on Free and Hobby, 10 on Pro, unlimited on Team and Enterprise. An invitation over that is refused with [limit_members](errors.md#limit_members). A team moved to a smaller plan keeps its members.

## People in more than one team

One account can be in several teams, each with its own role. Each team's plan covers its own apps; being in another team costs nothing extra, and you count as one member in each team's limit.

- **Joining with an account you already have.** Invite the address like any other. When they open the link, they sign in with their own passkey, then open the link again and press **Join**. The link alone never signs anyone in to an existing account, and an invitation for one address cannot be used by an account with another.
- **Switching in the dashboard.** People in two or more teams pick a team from the menu at the top of the sidebar. Each browser keeps its own choice; a new sign-in starts in the team you used last.
- **Switching in the CLI.** Log in once per team: `deplane login --team SLUG` (the approval page also lets you pick). `deplane teams` lists your teams and which have a login on this computer; `deplane team switch SLUG` sets the default; `--team SLUG` or `DEPLANE_TEAM=SLUG` picks one for a single command.
- **Tokens work in one team.** A CLI login, CI token, agent token or AI-tool connection works only in the team it was made for.
- **Leaving.** Press **Leave team** on the Members page, or run `deplane team leave`. Your tokens for that team stop working at once; your other teams are not affected. A team's last owner cannot leave: make someone else an owner first.

## Single sign-on

On Enterprise, owners can let staff sign in through the company's identity provider, and make that the only way in. See [Single sign-on](sso.md).