Sharing with people and groups

Share an app under Access → People and groups. Search for a person or a group and pick a role.

Role	Can
List only	See the app’s name, slug and owner in their list. Cannot open it, but can request access.
Viewer	Open the app.
Editor	Everything a viewer can, plus deploy, change settings and run automation.

Owning an app is not a grant. To hand an app over, transfer it.

Prefer a group to a list of people: the grant survives when someone joins or leaves the team. Groups are managed in Toft, and your administrator may fill some of them from your identity provider.

Showing a restricted app in everyone’s list

By default, your install shows every app in everyone’s list by name and owner, so people can find it and ask for access. Opening it still needs a grant.

On a Restricted app you can turn this off: switch off Show this app in everyone’s list. The app then appears only to people you have granted something. The switch never hides an app from someone you have shared it with.

Viewers cannot be editors

A person whose account role is viewer cannot hold Editor on any app, because editing includes deploying. They need to become a publisher first.

Checking access

The Access tab shows who holds what on this app. Your account → Access shows the other direction: everything you can reach.

Every grant is enforced by Toft before a request reaches your app. Your app does not need to check grants and should not try.