Team and Roles
Invite colleagues to your organization, give them a role, and change or remove their access.
Everyone in an organization holds one of three roles: Owner, Admin or Member. A role applies to the whole organization, so a person has the same role in every workspace it contains. You manage people from Members in the Organization section of the Clinia Console sidebar.
What each role can do
| Action | Owner | Admin | Member |
|---|---|---|---|
| View workspaces and their credentials | Yes | Yes | Yes |
| Create and delete workspaces | Yes | Yes | No |
| Create and delete credentials | Yes | Yes | No |
| View members and pending invitations | Yes | Yes | Yes |
| Invite people | As Admin or Member | As Member | No |
| Change the role of, or remove, a member | Admins and Members | Members | No |
| Edit the organization's name and URL slug | Yes | Yes | No |
| Manage the plan | Yes | No | No |
The roles are ranked Owner, then Admin, then Member. A few rules follow from that ranking:
- Changing someone's role or removing them requires a higher rank than theirs. An Admin can act on Members only. An Owner can act on Admins and Members.
- An Admin can invite people and assign roles as Member only. An Owner can invite as Admin or Member and can promote an existing member to Owner.
- Nobody outranks an Owner, so an Owner cannot be demoted or removed in the Console. An organization therefore always keeps at least one Owner.
- You cannot change your own role or remove yourself.
Invite members
You need the Owner or Admin role.
- Go to Members and select Invite members.
- Enter an email address and pick a role. Select Add another to invite several people at once, each with their own role.
- Select Send invitations.
Each person receives an email with a link to join the organization. The invitation is valid for 7 days. Until they accept, they appear in the members list with a Pending status. To invite someone as Owner, invite them as Admin or Member and change their role once they have joined.
Manage pending invitations
Select Revoke to cancel an invitation so its link stops working.
You cannot send a second invitation to an email that already has a pending one. Once an invitation is revoked or has expired, you can invite that email again.
Change a role or remove a member
- Go to Members and find the person. Use the search box or the role filter if the list is long.
- Select a new role from their role selector, or select Remove.
A role change or removal takes effect right away. A removed person loses access to the organization in the Console, including every workspace it contains.
Membership only controls what a person can do in the Console. A credential they created or copied is tied to its workspace, so it keeps working after their role changes or they leave.
If someone who leaves had access to a credential's secret, rotate that credential. See Rotate or delete a credential.