Team & audit
Your property isn't run by one person. Driftwood isn't either.
Add staff with per-page permissions, require 2FA where it matters, and review every change anyone made in a full audit log. Built for properties with rotating managers, front-desk teams, and seasonal staff.
Three roles
- Owner — exactly one per property. Full access including billing, team management, and audit. Set at signup. Transferrable.
- Admin — full read/write across the portal. Can be granted "audit" privilege to view the Activity log; otherwise that page is hidden.
- Staff — page-level access. Owner picks which pages each staff member can reach. Profile + Account pages are admin-only by design.
Per-user 2FA
- Each user has their own 2FA setting.
- Owners can require 2FA for any user (themselves included).
- Methods: authenticator app (TOTP) and passkeys (WebAuthn).
- Backup codes for recovery.
- Lockout after 5 wrong codes / 15 min, with automatic email alert.
Invite flow
- Owner clicks "Invite user" on the Account page.
- Fill in email + role + (for staff) which pages they can reach.
- Invitee gets a magic-link email, sets their own password, and they're in.
Activity log
Every meaningful action is logged across 8 categories: account, billing, device, security, system, users, messages, warnings. 70+ event types, each with a severity (Routine / Notable / Consequential) and a structured metadata payload.
Filter by date range, property, event type, severity, actor, or free-text keyword. "My activity" one-click filter. Export to CSV or JSON with the current filter (up to 10,000 rows).
Tier gate
Multi-user functionality requires Boutique tier or higher. Below that, the Account page shows your single owner row and the invite button is locked.
Built for properties run by real teams.
Audit access included on Boutique and Landmark plans.