Team & Access Control

Invite team members and control what they can do with role-based access control (RBAC). Every tenant has one Owner and can have unlimited Admins, Members, and Viewers on Pro and Enterprise plans.

Roles

Role	Who it's for	Capabilities
Owner	Account creator	Full access — billing, delete account, all team management, all data
Admin	Team leads, senior devs	Settings, rotate DSN, invite members, manage alerts — no billing/delete
Member	Developers	All data access, raw SQL queries, create dashboards and alert rules
Viewer	Stakeholders, PMs	Read-only — logs, traces, metrics, alert view. No SQL, no settings

Inviting a team member

Go to Settings → Team. Only Owners and Admins can see this section. Click Invite member, enter their email and select a role.

Screenshot needed

Settings page Team section: member list showing '[email protected] [owner]' and '[email protected] [admin] — accepted' and '[email protected] [member] — Pending invite'. Invite member button visible. Below the list: role legend explaining Owner/Admin/Member/Viewer.

An email is sent with an invite link. The invitee clicks the link, sets a name and password, and is immediately authenticated with the correct role.

Screenshot needed

Accept invite page: dark navy background, 'Accept your invitation' heading, 'Set a password to join your team' subtitle. Name (optional) field, Password field, Confirm password field, 'Join team' button.

Invite links expire after 7 days. If they expire, an Admin or Owner can resend the invite from the Team section.

Changing roles

Owners can change any member's role using the dropdown next to their name. Admins can change Member and Viewer roles but not Admin or Owner.

Screenshot needed

Team member row for '[email protected]': role badge 'admin', a role change dropdown open showing options 'Admin ✓', 'Member', 'Viewer'. Remove button (person-with-X icon) on the right.

Removing members

Click the remove icon next to a member. This immediately revokes their session and removes their account from the tenant. They can no longer log in.

You cannot remove the Owner or change their role. To transfer ownership, contact support.

API permissions

Endpoint	Min role
GET /api/usage, /api/alerts/rules, /api/dashboards	Viewer
POST /api/query (raw SQL)	Member
POST /api/alerts/rules, POST /api/dashboards	Member
DELETE /api/alerts/rules/:id	Admin
POST /api/settings/rotate-dsn	Admin
GET/POST /api/team	Admin
POST /api/settings/delete-account	Owner