Team & Access
Roles, permissions, workspace membership, invitations, and access reviews.
Team and access controls determine who can view, create, update, approve, and administer workspace data.
Access model
- Users are global identities.
- Memberships connect users to organizations and workspaces.
- Roles and permissions determine what users can do.
- Invitations allow controlled onboarding.
- Two-factor policy can be required for sensitive workspaces.
Review checklist
- Keep owner and admin roles limited.
- Review inactive users regularly.
- Use least-privilege roles for finance, security, and operations.
- Confirm two-factor compliance where required.
Support guidance
For access issues, include the user email, workspace, expected role, observed role, and the exact action that fails.