People, roles and TV links

A yard belongs to one workspace and is visible only to the people its owners and admins add. Every change lands in the activity log.

Signing in

People sign in with their Microsoft work account. Sign-in asks Microsoft for the name and email address only, nothing about Azure. Access is decided by the account's identity in your directory, never by an email address, since any directory's administrator can set those.

Roles

• Viewer: opens the yards they're given.
• Member: the same, and can make TV links for those yards.
• Admin: connects Azure, manages people and invites, sees the activity log.
• Owner: everything an admin does, and manages admins. A workspace always has at least one owner.

Owners and admins see every yard. Members and viewers see all yards, or only the ones chosen for them, including or excluding yards connected later.

Invites

An owner or admin creates an invite link and sends it themselves. It works once, for the Microsoft account that first signs in with it, and expires after 14 days. Owners and admins can also let anyone who signs in from the workspace's own directory join as a viewer of all yards, and switch that off again.

Someone who leaves, or is removed, loses access at once. TV links they made stop working, and invite links they made stop working too.

TV links

A yard can have up to five TV links. A link opens the yard with no sign-in, for a screen in the office. Each link is random, shown once when it is made, stored only as a hash, and revocable from the yard's settings. Disconnecting the yard revokes all of them.