[{"data":1,"prerenderedAt":310},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Farchitecture\u002Finvitations-and-requests":75,"docs-surround-\u002Farchitecture\u002Finvitations-and-requests":305},[4,45,51,57,63,69],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,11,15,19,23,27,31,35],{"title":5,"path":6,"stem":10},"architecture\u002Findex",{"title":12,"path":13,"stem":14},"Identity","\u002Farchitecture\u002Fidentity","architecture\u002F1.identity",{"title":16,"path":17,"stem":18},"Organisations","\u002Farchitecture\u002Forganisations","architecture\u002F2.organisations",{"title":20,"path":21,"stem":22},"Roles","\u002Farchitecture\u002Froles","architecture\u002F3.roles",{"title":24,"path":25,"stem":26},"Domains and claims","\u002Farchitecture\u002Fdomains-and-claims","architecture\u002F4.domains-and-claims",{"title":28,"path":29,"stem":30},"Access","\u002Farchitecture\u002Faccess","architecture\u002F5.access",{"title":32,"path":33,"stem":34},"Invitations and requests","\u002Farchitecture\u002Finvitations-and-requests","architecture\u002F6.invitations-and-requests",{"title":36,"path":37,"stem":38,"children":39,"page":44},"Data model","\u002Farchitecture\u002Fdata-model","architecture\u002F7.data-model",[40],{"title":41,"path":42,"stem":43},"ZoneAudit","\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","architecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":46,"path":47,"stem":48,"children":49},"Glossary","\u002Fglossary","glossary\u002Findex",[50],{"title":46,"path":47,"stem":48},{"title":52,"path":53,"stem":54,"children":55},"Guides","\u002Fguides","guides\u002Findex",[56],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"children":61},"Products","\u002Fproducts","products\u002Findex",[62],{"title":58,"path":59,"stem":60},{"title":64,"path":65,"stem":66,"children":67},"Trust","\u002Ftrust","trust\u002Findex",[68],{"title":64,"path":65,"stem":66},{"title":70,"path":71,"stem":72,"children":73},"Updates","\u002Fupdates","updates\u002Findex",[74],{"title":70,"path":71,"stem":72},{"id":76,"title":32,"body":77,"description":298,"extension":299,"meta":300,"navTitle":301,"navigation":302,"path":33,"roleNote":302,"seo":303,"stem":34,"__hash__":304},"docs\u002Farchitecture\u002F6.invitations-and-requests.md",{"type":78,"value":79,"toc":290},"minimark",[80,85,89,108,168,172,175,192,229,233,236,251],[81,82,84],"h2",{"id":83},"invitations","Invitations",[86,87,88],"p",{},"There is one standard invitation link for everyone, whatever brings them to CobraSphere.",[90,91,92,96,99,102,105],"ul",{},[93,94,95],"li",{},"A CobraSphere administrator issues an invitation for an account.",[93,97,98],{},"The person receives a link to account.cobrasphere.com\u002Finvite followed by a long token.",[93,100,101],{},"The link shows a short welcome, then the normal sign-in with a one-time code, then opens the product the invitation names.",[93,103,104],{},"A link works for 30 days. Issuing a new invitation stops the previous open one, so only the newest link works.",[93,106,107],{},"Only a fingerprint of the token is stored, never the token itself.",[109,110,111,124],"table",{},[112,113,114],"thead",{},[115,116,117,121],"tr",{},[118,119,120],"th",{},"Invitation status",[118,122,123],{},"What it means",[125,126,127,136,144,152,160],"tbody",{},[115,128,129,133],{},[130,131,132],"td",{},"Sent",[130,134,135],{},"The invitation was issued",[115,137,138,141],{},[130,139,140],{},"Opened",[130,142,143],{},"The link was opened. Only the time is recorded, no address or device",[115,145,146,149],{},[130,147,148],{},"Joined",[130,150,151],{},"The person signed in through the link",[115,153,154,157],{},[130,155,156],{},"Expired",[130,158,159],{},"The 30 days passed",[115,161,162,165],{},[130,163,164],{},"Revoked",[130,166,167],{},"The invitation was stopped, for example by a newer one",[81,169,171],{"id":170},"asking-for-access","Asking for access",[86,173,174],{},"A person without an access code can ask for access. No sign-in is needed.",[90,176,177,180,183,186,189],{},[93,178,179],{},"The request asks for a name, an email address, the organisation's name, its website if there is one, and the reason for asking.",[93,181,182],{},"Every request waits for a CobraSphere administrator. Automatic checks are shown to the administrator as signals and never decide anything.",[93,184,185],{},"Approving finds or makes the person's account, with the status Invited and nothing granted, and issues the standard invitation link.",[93,187,188],{},"Declining records the decision only.",[93,190,191],{},"A request and the details it came with are removed after 12 months.",[109,193,194,203],{},[112,195,196],{},[115,197,198,201],{},[118,199,200],{},"Request status",[118,202,123],{},[125,204,205,213,221],{},[115,206,207,210],{},[130,208,209],{},"Submitted",[130,211,212],{},"Waiting for a decision",[115,214,215,218],{},[130,216,217],{},"Approved",[130,219,220],{},"Accepted, and the invitation was sent",[115,222,223,226],{},[130,224,225],{},"Declined",[130,227,228],{},"Not accepted",[81,230,232],{"id":231},"leaving-an-organisation-or-closing-an-account","Leaving an organisation or closing an account",[86,234,235],{},"A signed-in person can ask, from the Account console, to leave an organisation or to close their CobraSphere account. Nothing happens until a CobraSphere administrator approves.",[90,237,238,245],{},[93,239,240,244],{},[241,242,243],"strong",{},"Leave an organisation."," Approving removes that one membership.",[93,246,247,250],{},[241,248,249],{},"Close the account."," Approving sets the account to Inactive, ends its sessions and stops its invitation links. Nothing is deleted.",[109,252,253,261],{},[112,254,255],{},[115,256,257,259],{},[118,258,200],{},[118,260,123],{},[125,262,263,269,276,282],{},[115,264,265,267],{},[130,266,209],{},[130,268,212],{},[115,270,271,273],{},[130,272,217],{},[130,274,275],{},"Accepted and carried out",[115,277,278,280],{},[130,279,225],{},[130,281,228],{},[115,283,284,287],{},[130,285,286],{},"Withdrawn",[130,288,289],{},"The person took the request back",{"title":291,"searchDepth":292,"depth":292,"links":293},"",3,[294,296,297],{"id":83,"depth":295,"text":84},2,{"id":170,"depth":295,"text":171},{"id":231,"depth":295,"text":232},"How people are invited, how they ask for access, and how they leave an organisation or close their account.","md",{},null,true,{"title":32,"description":298},"qyXZgg-yB3GW7dCF6kmaW5Eq17GIXrdSxbZ2dqTS5G4",[306,308],{"title":28,"path":29,"stem":30,"description":307,"children":-1},"Which CobraSphere products a person may open.",{"title":41,"path":42,"stem":43,"description":309,"children":-1},"How ZoneAudit keeps scans, findings and access codes for a domain.",1794325886545]