---
title: People, roles and reviews
description: Invite people to the admin, give them roles per site, and let editors approve what authors and their agents publish.
section: guides
order: 3
---

# People, roles and reviews

People reach Hollware through the admin at `/admin/`. They sign in with a passkey: there are no passwords.

## Roles

A person has a role in each site they are a member of:

| Role   | May                                                              |
| ------ | ---------------------------------------------------------------- |
| owner  | everything, tokens and invitations included                      |
| editor | read, write and publish, and approve reviews                     |
| author | read and write; what they publish waits for an editor's approval |

A token never does more than the role of its person, as it is now: demoting someone takes the scopes away from their tokens at once.

## Invite someone

In the admin, under People, invite an editor or an author. You get a link, valid once and for seven days, where they set up their passkey. From the command line:

```sh
npx hollware invite --role author --remote
```

An owner who needs a passkey on a new device gets a setup link with `hollware invite --owner`.

## Reviews

When someone without `content:publish` calls `publish`, the entry is not published. A review opens instead, with the revision they asked for, and waits in the admin under Reviews.

An editor sees the diff against what is live and the verdict of the contracts, then:

- **approves** it: the contracts run again, as `publish` runs them, and Hollware publishes that revision in the editor's name;
- **asks for changes**, with a note the author and their agent read with `list_reviews`.

A new revision of the entry cancels its pending review, and the author asks again: an approval is always of what the editor saw.

## Several sites

One person has one passkey for the whole deployment, and a role in each site. In the admin, switch sites from the header; an agent's grant is for one site, chosen on the consent page.