Members and Roles
Members are managed per organization under Members. Owners and admins can invite people and change roles.
| Capability | Owner | Admin | Member |
|---|---|---|---|
| View members and instances | ✅ | ✅ | ✅ |
| Open an instance they are assigned to | ✅ | ✅ | ✅ |
| Invite, remove, and re-role members | ✅ | ✅ | ❌ |
| Grant the owner role | ✅ | ❌ | ❌ |
| Administer an owner | ✅ | ❌ | ❌ |
| Create, upgrade, and delete instances | ✅ | ✅ | ❌ |
| Grant instance access | ✅ | ✅ | ❌ |
| Manage billing | ✅ | ✅ | ❌ |
| Read the audit log | ✅ | ✅ | ❌ |
| Configure an instance’s identity provider | ✅ | ✅ | ❌ |
| Delete the organization | ✅ | ❌ | ❌ |
An admin can administer members and other admins, but never an owner. An organization must always keep at least one owner, so the last owner cannot be demoted or removed.
Invite a member
Section titled “Invite a member”-
Go to Members and enter the person’s email address.
-
Choose the role they should get.
-
Send the invitation.
Invitations expire after 7 days. The invited person accepts under Organizations after signing in with the invited email address.