Back to the admin dashboard
The invitation carries their permissions. The address is typed once, used to send the email, and never stored: only a hash is kept.
An unused invitation simply stops working. A used one also removes the engine membership and clears the account's generation permission and quota (the account and its episodes stay).
Uses the engine id typed above. Shows each invitation's status; no address and no token is ever shown.