More than one farm. More than one person.
A block manager should not be reading the whole group's costs, and an agronomist you bring in for one vineyard should see that vineyard. Access is granted farm by farm, and every person decides how the system reaches them.

What you can do in the business, and what you can do on a farm.
Two separate questions, deliberately. Belonging to the business is not the same as belonging on every farm it owns — which is obvious on a forty-land group and easy to get wrong on a system that only has one switch.
Owner
Billing, the account itself, and everything an admin can do. Reaches every farm.
Admin
People, farms, integrations and API keys. Also reaches every farm.
Member
Works the farms they have been given, and only those. The everyday role.
Viewer
Read-only, on the farms they have been given. An accountant, a lender, a consultant.
On each farm, separately: a manager sets thresholds, rules, and who else is on it; an operator records work, acknowledges alerts and runs controls, but does not change the setup; a viewer reads. Someone can be a viewer in the business and manager of the one farm they run.
Someone from outside your business, on one farm.
An agronomist with their own TerraCast account can be given access to a single farm of yours without joining your business and without leaving theirs. They see that farm. They do not see the rest.
A farm manager can bring in someone already inside the business. Bringing in an outsider takes an account admin — that is the moment data crosses a boundary, and the farm holds spray records, costs and yields. Every grant is logged and appears on the farm's own list of who can reach it. "Without anyone knowing" is not a state the system supports.
That includes us. Someone from TerraCast helping you set up comes in on the same kind of grant, with a written reason and an expiry, visible on your People list and gone when it lapses.
A frost alert at four in the morning is only useful if it arrives.
Everyone chooses their own channels
In-app, email or SMS, and how urgent something has to be before it is worth waking up for. A manager wanting criticals by SMS and an agronomist wanting everything by email is the normal case, not an edge one.
Owners can see who would actually be reached
The people list shows each person's channels — and flags the ways someone can look configured and still be unreachable: SMS switched on with no number saved, or every channel off. Worth knowing before the frost, not after.
Visible to an owner, changeable only by the person
An admin quietly switching how someone is contacted is exactly how the one person who needed the alert stops getting it. Admins who need it changed ask, or change the default that applies to people who have not chosen.
Sent in the farm's time, not the office's.
Each person picks whether they want the daily digest and what hour it should arrive — and the hour is local to the farm, so a group spread across states does not get everyone's briefing on one clock. On a morning with nothing to report, it can stay quiet rather than train you to ignore it.