Admin Onboarding

Complete these four steps before inviting members.

Step 1: Create a workspace

Set the workspace defaults:

bun run aw workspace create \
  --name "My Workspace" \
  --email admin@example.com \
  --currency USD \
  --week-start monday

Available options:

--currency: USD, EUR, GBP, IDR, JPY, etc.
--week-start: monday or sunday

Step 2: Invite members

Invite users to the workspace:

bun run aw workspace invite \
  --workspace-id <workspace-id> \
  --email user@example.com

List workspace members:

bun run aw workspace members list --workspace-id <workspace-id>

Step 3: Configure security

Enable MFA for your admin account:

Go to Profile → Security
Click Enable MFA
Scan the QR code with your authenticator app
Enter the verification code

For MCP and other AI assistant access, seed the built-in OAuth clients with bun run aw db seed-oauth-clients. Then open Security → Connected Apps, click Connect for the client you want, approve the consent screen, and copy the one-time access token.

Step 4: Document runbooks

Create internal documentation for:

Member invitation and revocation
Workspace setting changes
Emergency contacts and escalation

Continue to Deployment Guide.