Team Access

Manage who can access your workspace and what they can do.

Roles

Organization roles

Role	Permissions
Owner	Manage organization settings, members, and all workspaces
Member	Access assigned workspaces based on workspace role

Workspace roles

Role	Permissions
Owner	Full access: manage members, edit settings, start/cancel runs, manage schedules, manage public links, archive jobs
Viewer	Read-only access to all workspace data (jobs, runs, logs, pipelines, deployments)

Add a member to a workspace

1. Navigate to the Settings page of your workspace
2. Scroll to the Members section
3. Click Add member and select a user from your organization
4. Choose a workspace role (Owner or Viewer)

The user must already be a member of your organization. To add someone to the organization first, go to the organization settings page.

Change a member's role

1. Go to Settings
2. Find the member in the members list
3. Change their role using the role dropdown

Only workspace owners can change roles.

Remove a member

1. Go to Settings
2. Find the member in the members list
3. Click the remove button

The member immediately loses access to the workspace. They remain in the organization and can be re-added later.

Invite someone to the organization

1. Navigate to the organization settings page (accessible from the org-level navigation)
2. In the Members section, invite new members
3. Assign an organization role (Owner or Member)
4. The new member can then be added to any workspace

Permission effects

Role-based permissions affect both the Web UI and API:

• Job management: Only Owners can start runs, cancel runs, and manage schedules from the Jobs page
• Public links: Only Owners can publish or unpublish interactive apps
• Settings: Only Owners can edit workspace name/description and manage members on the Settings page
• Viewing: All roles can view jobs, runs, logs, pipelines, deployments, and notebooks