Each member has their own page. Go to Settings › Team and choose their name.
Name and email
Under About, change their Name or Work email. A new email takes effect at once, and they sign in with it from then on.
Role and clients
Role sets what they can do. See Invite your team for what each role means.
Which clients is Only the clients they are on or All clients. An admin always sees every client.
Grants
Approve letters to clients. They may send the weekly letter to a client.
Credential values. Vault references only, or Sees values · logged. Every value they open is recorded.
Access
Reset authenticator is for a member who lost their phone. It signs them out and emails them a link to set up a new authenticator. Their password stays the same.
Resend the invitation sends a fresh set-up link to someone who has not signed in yet.
Deactivate signs them out and stops them signing in. Everything they did stays. Reactivate lets them back in.
Delete removes them for good. Their work stays, without their name on it.
Deactivate first. It can be undone. Deleting cannot.
Who can do what
Owners and admins change roles and clients, deactivate and reactivate, and resend invitations, for any member but the owner.
Only the owner changes an admin’s email, resets an admin’s authenticator, or deletes an admin.
Nobody can do any of this to the owner, or to themselves.