Skip to main content
You can invite multiple users to help run your business on AppointFlow. All team members get the same access level — there are no per-feature permission tiers (yet).

​
Where to manage team

/admin/settings/team — accessible from the sidebar under Settings → Team.

​
Inviting a team member

  1. Click Invite Member.
  2. Enter their email address and name.
  3. Click Send Invitation.
The teammate receives an email with a setup link. They click it, set a password, and verify their email — same flow as the main signup process. Once verified, they can log in at appointflow.online/login with their own email and password and see your business dashboard.

​
What teammates can do

All team members have full admin access to your business — they can:
  • View and manage all bookings, customers, services, and payments
  • Edit business settings, hours, and policies
  • Invite other team members
  • View the audit log (including their own actions)
They cannot:
  • Access other businesses (each user is scoped to one business).
  • Access platform-level Super Admin features.
  • Delete the business or transfer ownership.

​
Removing a team member

In /admin/settings/team, click the user → Remove. Their access is revoked immediately. Their historical actions remain in the audit log so you can still see who did what.

​
Tracking team activity

Every mutation (creating bookings, changing settings, etc.) is recorded in the Audit Log with the user’s email. Use this to investigate “who made this change?” questions.

​
Single sign-on / SSO

Not currently supported. Each team member logs in with their own email/password.

​
Granular permissions (e.g., view-only role)

Not currently supported. All team members are full admins. If you need role-based access (e.g., a receptionist who can manage bookings but not change pricing), please contact us — we’re tracking demand for this.

​
Best practices

  • Don’t share a single login. Always invite teammates individually so the audit log accurately attributes actions.
  • Remove members promptly when they leave. Revoking access takes effect immediately.
  • Use real email addresses. Reset links and notifications go to the user’s email — fake addresses leave you locked out.