Members and Roles

Note

This page only applies to the Ricochet Cloud portal. If you are searching for the RBAC docs page for the Ricochet instance, see the User Roles page.

Members are managed per organization under Members. Owners and admins can invite people and change roles.

Roles

Capability	Owner	Admin	Member
View members and instances	✅	✅	✅
Open an instance they are assigned to	✅	✅	✅
Invite, remove, and re-role members	✅	✅	❌
Grant the owner role	✅	❌	❌
Administer an owner	✅	❌	❌
Create, upgrade, and delete instances	✅	✅	❌
Grant instance access	✅	✅	❌
Manage billing	✅	✅	❌
Read the audit log	✅	✅	❌
Configure an instance’s identity provider	✅	✅	❌
Delete the organization	✅	❌	❌

An admin can administer members and other admins, but never an owner. An organization must always keep at least one owner, so the last owner cannot be demoted or removed.

Instance access

Owners and admins can sign in to every instance in the organization. A member can sign in to an instance only after an owner or admin grants access to it.

1. Go to Instances and open the instance.

2. Select the Access tab.

3. Turn on Can view for each member who should sign in.

Turn off Can view to stop a member from signing in to the instance. They stay in the organization and can still open the portal and every other instance they have access to.

If you connect the instance to your own OIDC or SAML provider, you choose who can sign in from that provider, and Ricochet hides the Can view column.

Invite a member

1. Go to Members and enter the person’s email address.

2. Choose the role they should get.

3. Send the invitation.

Invitations expire after 7 days. The invited person accepts under Organizations after signing in with the invited email address.