Team

Settings → Team is where an organization admin invites people and sets their role.

Roles

• Admin: everything, including settings, billing, agreements and completing assessments.
• Contributor: answers assessment questions, works on findings and tasks, uploads evidence and reports incidents.
• Auditor: read-only, limited to what an admin grants under **Reports → Share with an auditor**.

Inviting someone

Enter their email and role. They receive an invitation link; once they accept, they appear on the list. An invitation can be resent while it is pending; resending replaces the old link.

Changing or removing a member

Change a role from the member's row. Removing a member ends their sessions and turns off their API keys and AI assistant connections at once; their past work stays in the record under their name.

An admin given admin rights by delegation cannot make new admins or delegates, or remove the admin who delegated to them.

If your identity provider manages your members through SCIM, make membership changes there instead: the next sync would undo them here.