Teams and permissions
Everyone with the right access.
Invite the people you work with, choose what each person can do and keep each system's access separate with its own keys. Each team has its own domains, members and plan.
- Owner, admin and member
- Invitation valid for 7 days
- Keys per system
- One plan per team
How it works
Who joins, what they do and with which key
Three roles, no fuss
The owner handles everything. Admins help administer. Members use it day to day. Owners and admins change members' and admins' roles in the dashboard at any time.
See who has access
The team list shows each person's role, when they joined and who has already turned on two-step verification. You can remove a person at any time, and anyone who isn't the owner can leave on their own.
Invite by email, in a minute
Type the email, pick the role and you're done. The person gets a link valid for 7 days and accepts the invitation through it or in their own profile. Pending invitations stay visible and can be resent.
- Resending an invitation invalidates the previous link
- The number of people depends on the plan; pending invitations count
- The same person can join several teams with the same login
Pending invitations
One key for each system
Each system that sends email uses its own API key. Depending on the plan, you can limit a key to sending only and to a single domain. If a key leaks, you delete just that one, without taking down the rest.
Understand key permissions- Full-access key or send-only key (send-only depends on the plan)
- A send-only key can be tied to one domain
- The key appears only once, when it's created; afterwards only its beginning
Each account with its own protection
A team's security is the sum of each person's security. Postal gives you the tools for it.
Two steps
Besides the password, login asks for a 6-digit code from the authenticator app. There are recovery codes in case you lose your phone.
See who turned it on
The member list shows who already has two-step verification on. It isn't mandatory: each person turns theirs on in Profile, Security.
- AnaEnabled
- BrunoEnabled
- CarlaDisabled
End what you don't recognize
Each person sees where they're signed in and can end one session or all the others.
- Chrome on macOSThis device
- Safari on iOSEnd
Multiple teams, one plan for each
An agency can have one team per client. You can be an owner on one team and a member on another, with plans, billing, invitations and roles separate for each team.
One access for everyone
- Everyone uses the same API key
- If the key leaks, it has to be replaced in every system
- An agency's clients share the same dashboard and the same plan
One access for each
- Each system has its own key, and you can delete just the one that leaked
- Each client has their own team, with their own members, domains, keys, webhooks and plan
- You switch teams from the menu, without leaving the account
Frequently asked questions
Who can delete the team?
Only the owner. Admins manage members, plan and billing, but can't delete the team or transfer ownership.
Is two-factor authentication required?
No. Each person turns theirs on in Profile, Security. The member list shows who already has.
Can I restrict a key to one domain?
Yes, when the plan includes restricted keys (see plans and pricing). Only a send-only key can be tied to a domain: it can only send from that domain's senders and can't read contacts, domains or emails from other keys.
How many people fit on the team?
It depends on the plan. See plans and pricing.