Team and roles
The person who creates the organization is its Owner and can do everything. Owners and Admins add members on the Team page: enter an email, a role and a temporary password, and share the password with the new member (they can change it under Settings).
Built-in roles
| Role | Can |
|---|---|
| Owner | Everything, including granting or removing the Owner role |
| Admin | Everything except changing owners |
| Developer | Products, policies, licenses and API keys; view analytics and the team |
| Support | View products; view, issue, suspend and revoke licenses; view analytics |
| Viewer | Read-only: products, licenses, API keys, analytics, team |
On the Standard and Business plans you can also create custom roles from these permissions:
| Permission | Allows |
|---|---|
products.read / products.write | View / create and edit products and policies |
licenses.read / licenses.write | View / issue, suspend, revoke licenses and deactivate machines |
api_keys.read / api_keys.write | View / create and revoke API keys |
analytics.read | Overview and Analytics pages |
staff.read / staff.write | View / manage team members and roles |
org.manage | Rename the organization |
Role changes and disabled accounts take effect within 30 seconds. An organization always keeps at least one active Owner.