The roster
Settings → Team lists who is on the agency, their agency role, their content role, whether they have two-factor on, and who has been invited. Owners and admins can open it. Owners can set any role; admins can move people between admin and member but cannot make or unmake an owner; nobody edits their own role; and the last owner cannot be removed or demoted.
Invitations
Every plan can invite people. An invitation names the role and optional content role, and takes a seat when it is sent. Solo carries 3 seats, Growth 10, Scale unlimited; the page says how many are left. Pending invitations can be resent or revoked, and each step is audited. A downgrade never removes anyone — it only stops the next addition.
Requiring two-factor
An owner or admin can require two-factor of everyone on the team. Members get a grace period (seven days by default) to set it up, and the roster shows who has not. After the deadline a member without it can open only Security settings until they turn it on. Someone who signs in through the iUtils hub satisfies the requirement with the hub's two-factor.
Billing
Every workspace starts with a free week: 7 days with everything switched on, and no card. After your free week everything you made stays visible; subscribe to keep creating. Until someone subscribes the workspace is read-only — nothing can be created, scheduled, published or sent, but anything can still be viewed, exported or deleted. Settings → Billing says where the workspace stands, shows each plan with its price and brand allowance, and is where an owner or admin subscribes; subscribe during the free week and the first charge lands when the week ends. Every member can read the page, which names the owners and admins who can subscribe. Payment methods, invoices, plan changes and cancellation are handled in the Stripe billing portal, which holds the card; we never see it.