Team Management
Invite teammates, manage roles, track invitations, bulk operations on Pro+, domain auto-join, SSO JIT.
Team Management
Add teammates, assign roles, and manage seats. This guide covers day-to-day team operations; see Roles & Permissions for what each role can actually do.
Where team management lives
| Page | For |
|---|---|
| Settings → Team | Organization-wide members and invitations. |
| Project → Team | Per-project membership for that project. |
Inviting members
Org-wide invite
- Open Settings → Team.
- Click Invite member.
- Enter email, choose org role (Member by default).
- Optionally pre-add to specific projects with project roles.
- Send. The recipient gets an email with a 7-day invitation link.
Project-only invite
- Open the project, go to the Team tab.
- Click Add Member.
- Pick from existing org members, or invite a new email.
- Pick the project role.
Invitation states
| State | Meaning | Action available |
|---|---|---|
| Pending | Sent, awaiting acceptance. | Resend, revoke. |
| Accepted | Joined. | Manage role, remove. |
| Declined | Recipient declined. | Re-invite. |
| Expired | 7 days passed without action. | Re-invite. |
| Revoked | Cancelled by an admin. | Re-invite. |
Invitation links are signed and one-time-use. Forwarding doesn't work — only the original recipient's email can accept.
Changing a role
From the team list, click the role dropdown next to a member. Select a new role. Changes are immediate.
Constraints:
- An organization always has exactly one Org Owner. Promoting someone to Owner demotes the current Owner to Admin in the same operation.
- You can't demote yourself below your current role unless another Owner exists.
- Org Owners and Admins are auto-promoted into all projects (Owner / Admin respectively) — you can't restrict their project access.
Removing a member
Click the menu next to a member and choose Remove. They lose access immediately. Their previously generated tests, runs, and audit-log entries remain attributed to them; nothing is destroyed.
Removed members can be re-invited later — their old data resurfaces if they come back, since matching is by email.
Seat limits
| Plan | Workspace seats |
|---|---|
| Free | 1 |
| Starter | 1 |
| Pro | 5 |
| Business | 15 |
| Enterprise | Unlimited |
Pending invitations don't count until accepted. If you hit the cap, the invite button is disabled with an upgrade prompt. Remove inactive members or upgrade.
Filter and search
From Settings → Team, search by name or email and filter by role or last-active timestamp. Useful for finding inactive seats before renewal.
Activity and last sign-in
Each member shows last sign-in time. Useful for finding inactive seats before renewal:
- Sort by last-active to find members who haven't signed in recently.
- Pro+ audit log shows every action; pair with last-sign-in for a full picture.
SSO and JIT provisioning Business+
If your org uses SAML SSO with JIT, new members appear automatically the first time they sign in via your IdP — no manual invite needed. They're created with the configured default role (Member by default; configurable in SSO settings).
See SSO / SAML Setup.
Common questions
How do I move someone between organizations?
You can't directly. They need to be removed from the old org, then invited to the new one. AegisRunner doesn't currently support cross-org transfers.
Can a person be in multiple organizations?
Yes. They'll see a workspace switcher in the sidebar to flip between orgs.
Does removing someone kill their in-progress runs?
No — running jobs continue to completion. Only future actions are blocked.
I removed someone by mistake. Can I undo?
Re-invite them. Their data is matched on email, so once they accept they're back where they were (subject to the same per-project memberships, which you may need to re-add).
Related
- Roles & Permissions
- SSO / SAML Setup
- Usage & Billing — seat costs.
- Two-Factor Authentication — enforcement on Business+.