Team & Access – Members Management
Last updated
Last updated
This document explains how Team & Access works at the Organizational Unit (OU) level, focusing on how Members, Groups, Roles, and Permissions are managed together to control access.
Start by understanding the access model:
Members are individual users.
Groups are collections of members.
Roles define what actions are allowed.
Permissions are the smallest access units contained inside roles.
Best practice: assign permissions to roles, roles to groups, and users to groups.
Manage who has access to an Organizational Unit
Control what users can see and do
Simplify access management using groups and roles
Ensure consistent and secure permission assignment
Before managing Team & Access, ensure that:
Navigate to Organization → Organizational Units and select the target OU.
From the OU details page, open the Team & Access section.
This section includes:
Members represent individual users within the OU.
You can:
Note: Direct role assignment should be limited to special cases.
Groups help organize members and simplify permission management.
You can:
Example groups:
5.1 Add a Group to the Workspace
Members of the added group will automatically gain access to the workspace.
5.2 View Group Members
This view is read-only and reflects members synced from the organization.
5.3 Manage Roles for a Group
Any role change applies immediately to all current and future group members.
5.4 Remove a Group from the Workspace
Warning:
Roles
Roles are collections of permissions.
You can:
Permissions
Permissions define specific allowed actions, such as:
Permissions are not assigned directly to users — they are always part of a role.
After completing these steps:
You have Admin or Access Management permission on the OU
The Organizational Unit already exists
Required roles are already defined (or default roles are available)
Members
Groups
Roles & Permissions
View all members in the OU
Invite new members
Remove existing members
View assigned roles (direct or via group)
Click Add Member
Enter the user’s email
Assign one or more groups
(Optional) Assign a role directly
Confirm the invitation
Create a new group
Add or remove members from a group
Assign roles to a group
QA Team
Backend Team
Security Admins
Click + Add groups.
Search and select a group by name or code
Confirm to Assign the group.
In the Groups list, click the Action (⋯) menu of a group.
Select View members.
A side panel opens showing:
Member name
Added date
Added by
In the Groups list, open the Action (⋯) menu.
Select Manage roles.
Choose one or more roles from Select roles.
Assigned roles define the permissions for all members of this group within the workspace.
Open the Action (⋯) menu of the group.
Select Remove.
Confirm the removal.
Removing a group will revoke all roles and permissions granted through this workspace for its members.
The group itself is not deleted from the organization.
View predefined roles
Create custom roles (if supported)
Assign roles to groups or members
Read resources
Create or update data
Manage access settings
Members have controlled access to the OU
Permissions are consistently applied through roles
Groups simplify onboarding and access updates
The OU follows security and access best practices