Two kinds of access matter in CMO.so: who on the team can see or change each website, and what can act on the user's account (connected AI apps, API keys). This skill reviews both, grants the least access that fits each person's job, removes access that is no longer needed, and tidies personal settings such as notifications and display name. Removing team members, creating or revoking API keys and billing stay in the CMO.so app; this skill gives the link.
When to use
- "Who has access", "add my colleague", "make X an editor", "remove access".
- Security tidy-up: an agency relationship ended, a laptop was lost, an app is no longer used.
- Notification noise, display name, "how many messages are left today".
- Not for: signing the agent in or switching website (
cmo-connect); what is waiting today (cmo-daily). Plans, invoices, removing members and creating or revoking API keys are done in the CMO.so app.

