Manage team members and roles

Invite your team to the Scalekit dashboard and give each person a role that matches their work. Roles control who can view or change your SSO connections, directories, organizations and other settings. A role applies to every environment in the workspace unless you override it for one environment.

Using AgentKit? AgentKit team members and roles lists what each role can do in AgentKit.

• You need the Admin role to invite people or change roles. Other roles can see the team but can’t change it.

Role	For
Admin	Full access to everything, including members, roles and billing.
Developer	Build and configure your integration. Can’t manage members, roles or billing.
Member	Read-only access to settings.
No Access	Can’t open the dashboard. Use it to suspend someone without removing them.

What each role can do for modular SSO and SCIM:

Area	Admin	Developer	Member
SSO connections and domains: view	Yes	Yes	Yes
SSO connections and domains: create, edit and delete	Yes	Yes	No
Directories (SCIM): view, including synced users and groups	Yes	Yes	Yes
Directories (SCIM): create, edit and delete, including SCIM tokens	Yes	Yes	No
Organizations: view	Yes	Yes	Yes
Organizations: create and edit	Yes	Yes	No
Organizations: delete	Yes	No	No
Admin portal links: generate and revoke	Yes	No	No
Auth logs	Yes	Yes	No
API credentials: view and generate secrets	Yes	Yes	No
Webhooks: view	Yes	Yes	Yes
Webhooks: create and edit	Yes	Yes	No
Billing	Yes	No	No
Team, roles and environment access: view	Yes	Yes	Yes
Team, roles and environment access: change	Yes	No	No

No Access can do none of these.

Only people you invite can join your workspace.

1. Open Workspace > Team Members and select Invite.

2. Enter their Email, choose a Role, and select Invite.

The person appears in Team Members with the role you chose.

In Team Members, open the member’s menu and select Edit role. Choose a new Workspace role and select Save.

Under Environment access in the same drawer, select Set override next to an environment and choose the role for that environment only. For example, make someone an Admin in Development and a Member in Production. Reset to Default removes the override.

In Team Members, open the member’s menu, select Remove Member, and confirm with Delete. To block access but keep the person’s record, give them No Access instead.

When the four roles don’t fit, open Workspace > Roles and select Create role. Give it a Role name and Description, then choose its Permissions, or start from a preset such as Support or Billing Owner. You can only grant permissions your own role has.

Custom roles appear in the Role list when you invite or edit a member.

Ask the teammate to sign in to the dashboard. In Team Members, their row shows the role you gave them. Open Edit role to see their Effective role in each environment.