Authentication
How teammates sign in to the Rheo dashboard and how app credentials differ from member logins.
Dashboard sign-in
The Rheo dashboard uses your organization's configured sign-in provider (for example email, Google, or SSO). Each teammate signs in with their own account. Workspace membership and role determine which apps, flows, and settings they can access.
After sign-in, members see only the workspaces they belong to. Switch workspaces from the workspace switcher in the top bar.
Roles and access
Roles — owner, admin, editor, and viewer — control what each member can do in the dashboard. See Members & roles for the full breakdown.
App credentials (not dashboard passwords)
End users in your mobile or web app do not sign in to Rheo with dashboard credentials. Your app connects to Rheo using publishable keys scoped to test or live environments. Create and rotate these keys in each app's settings.
This separation keeps admin access distinct from in-app traffic. If a key is exposed, rotate it in App settings without changing anyone's dashboard password.
Security practices
Treat the Rheo dashboard like any admin console:
- Use strong passwords and enable multi-factor authentication where your organization supports it
- Offboard teammates promptly when they leave — remove them from Account → Members
- Avoid sharing owner accounts; transfer ownership instead