Workspaces and people
How workspaces, roles, invitations, sign-in, two-factor authentication, passkeys, agencies and support sessions work in Odden Cloud.
A workspace is one team's copy of Odden: its own contacts, deals, tickets, settings and people. Nothing in one workspace is visible from another. Your workspace lives at cloud.odden.io/your-address.
Your account is separate from your workspaces. One account, one email address and one password can belong to many workspaces, with a different role in each. Every workspace has unlimited users.
Roles
Each person in a workspace has one role. Owner is the highest and Viewer the lowest.
| Owner | Admin | Manager | Member | Viewer | |
|---|---|---|---|---|---|
| See all records | Yes | Yes | Yes | Yes | Yes |
| Create and edit records | Yes | Yes | Yes | Yes | No |
| Delete records | Yes | Yes | Yes | No | No |
| Delete records permanently | Yes | Yes | No | No | No |
| Change settings records, such as pipelines, custom properties, routing rules and SLA policies | Yes | Yes | No | No | No |
| Open the Team, Email, Public pages, Settings and Support access pages | Yes | Yes | No | No | No |
| See the Billing page | Yes | Yes (look only) | No | No | No |
| Choose, change and cancel a plan | Yes | No | No | No | No |
| Export your data, delete the workspace | Yes | No | No | No | No |
Owners and admins also manage people. Owners can manage everyone. Admins can manage managers, members and viewers, but not owners or other admins. A workspace always has at least one owner, so make someone else an owner before you demote or remove the last one. Give the owner role only to people you fully trust.
Invite people
Owners and admins invite people from the Workspace menu.
- Open Workspace, then Team.
- Select Invite member.
- Enter their email address and pick a role. The default is Member.
- Select Send invitation.
The person gets an email with a Review the invitation button. Invitations expire after 7 days, and nothing happens until the person accepts. What they see depends on whether that address already has an Odden Cloud account:
- No account yet. The link lets them make one on the spot: a name, a password of at least 12 characters, and agreement to the Terms, the Privacy Policy and the Data Processing Addendum. Following the invitation link proves the address, so there is no separate email check. They join your workspace straight away. No trial starts, no payment is asked for and no workspace of their own is made.
- Already has an account. They sign in with that address and select Join workspace. An invitation to a different address does not work.
Someone invited this way can add a workspace of their own later from their account page, as in Agencies and several workspaces.
To see who has not accepted yet, open Workspace, then Pending invitations, where Revoke cancels one. Inviting the same address again replaces the earlier invitation.
Change a role or remove someone
Open Workspace, then Team. Next to the person, select Change role or Remove, within the limits above.
A removed person loses access on their next click. Their account stays, and so do their other workspaces.
Sign in
Sign in at cloud.odden.io with your email address and password. If you forget your password, use Forgot password? on the sign-in page and we email you a link.
After you sign in, Your account page lists the workspaces you belong to, with your role in each. Select one to open it.
From your account page, select Change name, email, password or two-factor to open your profile. There you can set a picture and time zone, change your password, and change your email address. A new email address only takes effect after you select the link we send to it.
Sign out everywhere else on the account page ends your sessions in every other browser and device. Use it if you lose a device.
Two-factor sign-in and passkeys
Two-factor sign-in asks for a second proof, besides your password, each time you sign in. You can use either of these:
- Passkey. Your fingerprint, face or device PIN, from your phone, computer or password manager.
- Authenticator app. A 6-digit code from an app on your phone. When you set it up, you also get recovery codes. Keep them somewhere safe: they are the way back in if you lose your phone.
A passkey is a second factor, not a replacement for your password.
When it is required
Two-factor sign-in is required as soon as your account belongs to more than one workspace, whether you added the second one or were invited to it. This keeps a login that reaches several teams' data safe. Until you set it up, you cannot open any workspace: you are sent to your profile instead.
It is optional if you belong to one workspace, and we recommend it. Anyone can turn it on at any time.
Set it up
- On your account page, select Change name, email, password or two-factor.
- Under Passkeys, select Add a passkey, or under Authenticator app, select Set up.
- Follow the prompts. You are asked for your password to confirm.
You can add more than one passkey, rename them, and delete one you no longer use. Passkeys only work at cloud.odden.io.
Agencies and several workspaces
If you run several clients, give each client a workspace of its own. Their data never mixes. You sign in once and move between them:
- In any workspace, use the button in the top bar with the workspace name to switch to another one, or select All workspaces to go back to your account page.
- To add a workspace, select Add a workspace on your account page. It opens at once on its own 30-day free trial with you as owner, and you choose its plan separately. Billing is per workspace. See Billing.
- Invite a client's team to their workspace only. Each person can have a different role in each workspace.
Once your login reaches a second workspace, two-factor sign-in becomes required for you, so set it up as soon as you add one. For agency pricing, see the pricing page.
Support sessions
If you ask us for help, one of our administrators may need to look at your workspace. They do this through a support session, and nothing else.
- It is recorded. Open Workspace, then Support access to see every session: when it started, who from Odden, which member they viewed as, why, and whether it is running.
- It is read-only by default. Support sees what that member sees and cannot change anything.
- It expires by itself. A session lasts 30 minutes unless support chooses a different time, and never more than 60 minutes. A banner at the top of every page tells you a session is running and how many minutes are left.
- Owners are emailed when a session starts.
- It needs a stated reason, and only an administrator with two-factor sign-in turned on can start one.
Owners and admins can end a running session at any time with End now on the Support access page. Support is signed out on its next click.
Owners and admins can also choose Permission, then Let support make changes. A session can then change records, as a Manager could. It can still never manage your members, email, domains or workspace settings, and it cannot export or delete the workspace, which only owners can do. Switch the toggle off again at any time.
The Terms and the Privacy Policy describe this too.