People & Teams

Manage who has access to your enterprise and how they're organized.

Inviting members

Invite new members by entering their email and selecting a role. They'll receive an email with a link to join your enterprise.

Roles

The built-in enterprise roles cover five common access levels. You can also create custom roles with the exact permissions your organization needs.

Owner has full control over the enterprise. This is the only role that can manage billing, delete the enterprise, assign the Owner role to others, and manage other Owners. When you need someone who can handle the financial and administrative side of the enterprise, they need to be an Owner.

Admin can manage enterprise settings, invite and remove members, change roles, and create workspaces. Admins have broad access to configure the enterprise but cannot manage billing or other Owners. When you first create an enterprise, you are assigned the Admin role.

Billing Admin manages subscriptions and payment methods without gaining product administration access.

Member can create workspaces and collaborate on workspaces they can access. Members cannot change enterprise configuration unless a custom role grants those permissions.

Viewer has read-only access. Viewers can see all internal workspaces but cannot create or edit anything.

Managing members

From the People page you can view all current members and their roles, change a member's role, remove members from the enterprise, and view pending invitations and resend or cancel them.

Directory-managed members show their directory and current Active or Deprovisioned state. Update their identity and group membership in the identity provider, then use Sync directory under Settings > Security if you need to refresh immediately.

Teams

Teams let you organize members into groups for easier access management. Instead of adding individuals to each workspace one by one, you can do the following.

1. Create teams that reflect your organization (e.g., "Platform Team", "Security Team")
2. Add those teams to the workspaces they need access to
3. When people join or leave a team, their workspace access updates automatically

Managing teams

• Create a team by giving it a name and adding members
• Add or remove members by selecting from existing enterprise members
• Delete a team to remove the team entirely. Members stay in the enterprise.

Directory groups

When directory provisioning is configured, synced groups appear on the People page. You can inspect their members and assign each group a default enterprise role.

To use an identity provider group for workspace access, open an Infracodebase team and add the directory group from the Members tab. Teams can contain both directory groups and manually managed members. The identity provider remains the source of truth for group membership.

Access is additive. Removing one direct, team, or directory-group grant does not remove access a person still receives from another source.

See Single Sign-On for verified domains, directory setup, group roles, and deprovisioning behavior.