A team, called an organization in the app, lets several people share hosts, keys, tunnels and VPNs through shared vaults. Shared vaults are end-to-end encrypted like your own: the sync server can't read them either.
What you need
- Sync turned on, with a server that supports teams. morphgate.com and the reference server do. Once sync is on, Teams appears at the bottom of the sidebar. If the server doesn't support teams, the Teams panel says so.
- On morphgate.com, a team has its own plan, separate from Personal: a free trial when you create it, then Team or Business. See Plans and billing.
Create a team
- Open Teams at the bottom of the sidebar.
- Under New organization, enter a name and choose Create.
You become its owner. Next, create vaults in it and invite people. On morphgate.com, the team's 7-day trial starts now, once per address that creates a team, and includes the Business features.
Roles
- Owner
- One per team. Everything an admin can do, and also: invite and confirm admins, make members admins and admins members, transfer ownership, delete the team, and choose and pay for its plan.
- Admin
- Opens and manages every vault of the team. Invites, confirms and removes members, sets policies, reads the activity log, and on morphgate.com sets up single sign-on, provisioning, device approval and the audit stream.
- Member
- Opens the vaults an admin gave them access to, with view, edit or manage access to each. Creates vaults only if the team allows it.
Your personal vault always stays yours. Nobody in a team, owners included, can open it.
Joining takes two steps
Someone who accepts an invite is Waiting for confirmation. An admin then compares fingerprints with them and confirms them, which gives them the keys to their vaults. Only confirmed members open vaults and take a seat. See Inviting and confirming members.
Seats
On a paid plan, each confirmed member takes a seat, the owner included, and the seat also covers that member's personal vault, so they don't need a Personal plan. Team and Business are sold for at least 3 seats. You can invite more people than you have seats; you confirm them once you add seats. During the trial, there's no seat limit.
Where you manage a team
Most of a team's work happens in the app, because confirming members, giving access and rotating keys need vault keys that only your app has. Some admin settings are on the website, because they involve the team's plan or outside services.
- In the app (Teams, then the team's Open)
- Vaults and access, members and roles, confirming and removing people, invites, policies, key rotation, device approvals, the activity log, transferring ownership and deleting the team.
- On the team page at morphgate.com
- For owners and admins: the plan and seats (owner only), invites, removing members, policies, device approval, single sign-on, SCIM provisioning, the audit stream and recent activity. Open your account page and choose Manage next to the team. The team page never sees what is in the vaults.
Ownership
The owner can hand the team to a confirmed admin: under Ownership, choose Transfer ownership, pick the admin, and confirm with your master password. The new owner gets every right you had; you stay on as an admin. To hand the team over, make someone an admin first.
The owner can't leave the team. Transfer it first, or delete it.
Delete a team
Under Ownership, the owner chooses Delete organization and confirms with the master password. This deletes the team and all its vaults for everyone. Their items disappear from every member's devices at their next sync, and on morphgate.com the team's subscription is cancelled first. It can't be undone.
Leave a team
A member or admin can leave with Leave in the member list. The team's vaults stop syncing to your devices and are removed from them. Your personal vault is unchanged. Someone who removes you from a team causes the same; on morphgate.com you get an email about it.
Next: Inviting and confirming members, Shared vaults and access, Team policies.