Giving and revoking access

Access is one thing, whatever it came from. A purchase, a manual grant and a community placement all write the same access record, so a member never ends up with two competing kinds of access to the same product.

There are three main ways in.

1. They buy it. A completed checkout grants the product to the buyer's email address automatically.
2. You grant it. Open the product, click the Customers tab, type an email and an optional name, then click Grant access.
3. They get a community. Everything placed inside a community is granted along with it, so one community grant can hand over a dozen products at once. See Community spaces.

New people get an invite. If the email you grant does not belong to anyone yet, a contact is created and an invite is emailed with a link to set a password. That link is valid for seven days. The access itself exists immediately, and the invite is only how they claim the login. Until they set a password the row is marked Invite pending.

The Customers tab lists everyone. Direct grants have a Revoke button next to them. Rows marked via a community name are read only here, because that access comes from the community. Remove those on the community's own members list instead.

Manual grants are permanent on purpose. A grant you made by hand is never taken away automatically. If that member later cancels a subscription covering the same product, your comped access survives.

Purchased access follows the payment. When a subscription ends at the payment processor, access to what it covered is revoked. A failed payment does not revoke straight away unless you asked for that under Sales → Subscriptions & cancellation.

A few other doors exist. A funnel opt-in step can grant a free lead magnet, an automation can grant an offer, and your API and connected app integrations can grant a product by email. All of them write the same record, so revoking afterwards works exactly the same way.