Teams

Teams as a scope, not just a grouping

A team is a permission boundary. Assign a host to a team, and every action against that host and its guests is evaluated against a member’s role within that team, not their role globally. Two teams with the same member can grant that person different roles in each.

Membership changes take effect immediately

Adding, removing, or changing a member’s role in a team applies to their very next request: there’s no delay, no re-login required, and no server restart needed for a permission change to take hold.