Team Administration

Manage your organization's team members, roles, and access permissions.

Organization Structure

Organization (Acme Engineering)
├── Owners (full control)
│   └── Jane Smith
├── Admins (manage members & projects)
│   ├── John Doe
│   └── Bob Wilson
└── Members (access projects)
    ├── Alice Chen
    ├── Charlie Brown
    └── ... (97 more)

Roles & Permissions

Available Roles

Role	Permissions
Owner	Full access, billing, delete org, transfer ownership
Admin	Manage members, projects, settings (no billing)
Member	Create/access projects, use workstations
Viewer	Read-only access to projects

Permission Matrix

Permission	Owner	Admin	Member	Viewer
View projects	✅	✅	✅	✅
Create projects	✅	✅	✅	❌
Delete projects	✅	✅	Own only	❌
Invite members	✅	✅	❌	❌
Remove members	✅	✅	❌	❌
Manage roles	✅	✅	❌	❌
Org settings	✅	✅	❌	❌
Billing access	✅	❌	❌	❌
Delete organization	✅	❌	❌	❌

Managing Members

Invite Members

1. Go to Organization → Members
2. Click Invite Members
3. Enter email addresses:

   alice@company.com
   bob@company.com
   charlie@company.com

4. Select role for all invitees
5. Click Send Invitations

Invitees receive email with link to accept.

Bulk Import

For large teams, use CSV import:

1. Click Invite Members → Import CSV
2. Upload CSV file:

   email,role
   alice@company.com,member
   bob@company.com,admin
   charlie@company.com,viewer

3. Review import preview
4. Click Import

View Members

The members list shows:

Name	Email	Role	Status	Joined
Jane Smith	jane@acme.com	Owner	Active	Jan 1, 2026
John Doe	john@acme.com	Admin	Active	Jan 5, 2026
Alice Chen	alice@acme.com	Member	Pending	-

Change Member Role

1. Click member's name to open profile
2. Select new role from dropdown
3. Click Save Changes

Role Changes

Demoting an Admin removes their management access immediately.

Remove Members

1. Click member's menu (⋮)
2. Select Remove from Organization
3. Confirm removal

What happens:

• User loses access immediately
• Their projects remain (transferred to org)
• License seat freed up
• Activity logs preserved

Pending Invitations

View Pending

Go to Organization → Invitations to see:

Email	Role	Sent	Expires
alice@company.com	Member	Jan 9, 10:00 AM	Jan 16
bob@company.com	Admin	Jan 8, 2:00 PM	Jan 15

Resend Invitation

1. Click invitation's menu (⋮)
2. Select Resend

New invitation email sent with fresh expiration.

Cancel Invitation

1. Click invitation's menu (⋮)
2. Select Cancel

Invitation link becomes invalid.

Invitation Expiration

Invitations expire after 7 days. Expired invitations must be re-sent.

Organization Settings

Basic Settings

1. Go to Organization → Settings
2. Update:
   • Organization name
   • Logo
   • Description
   • Default member role

Security Settings

Setting	Description
Require 2FA	Force all members to enable 2FA
Session timeout	Auto-logout after inactivity
IP allowlist	Restrict access to specific IPs
SSO enforcement	Require SSO login (Enterprise)

Audit Logs

Enterprise organizations have access to audit logs:

1. Go to Organization → Audit Logs
2. Filter by:
   • Date range
   • User
   • Action type
3. Export for compliance

Example log entries:

Jan 9, 10:30 AM  jane@acme.com  member.invited    bob@acme.com
Jan 9, 10:25 AM  john@acme.com  project.created   Project Alpha
Jan 9, 09:15 AM  alice@acme.com license.acquired  seat 5

Transfer Ownership

Requirements

• You must be current Owner
• Target must be existing member
• Target must have 2FA enabled (recommended)

Process

1. Go to Organization → Settings → Transfer Ownership
2. Select new Owner
3. Enter your password to confirm
4. Click Transfer

The new Owner receives notification. You become Admin.

Delete Organization

Permanent Action

Deleting an organization permanently removes all data, projects, and member access. This cannot be undone.

Prerequisites

1. Cancel active subscription
2. Export any needed data
3. Remove all members except Owner

Process

1. Go to Organization → Settings → Delete Organization
2. Type organization name to confirm
3. Enter password
4. Click Delete Organization

Teams (Enterprise)

Enterprise organizations can create teams for granular access control.

Create Team

1. Go to Organization → Teams
2. Click Create Team
3. Enter team name and description
4. Add members
5. Assign project access

Team Permissions

Team	Projects	Members
Frontend	UI, Design System	Alice, Bob
Backend	API, Database	Charlie, David
DevOps	Infrastructure	Eve, Frank

Nested Teams

Engineering
├── Frontend
│   └── Mobile
└── Backend
    └── API

Child teams inherit parent permissions.

Best Practices

For Administrators

1. Use least privilege - Assign minimal required role
2. Review regularly - Audit member access quarterly
3. Offboard promptly - Remove departing members immediately
4. Enable 2FA - Require 2FA for Admin and Owner roles
5. Document roles - Maintain role assignment documentation

For Members

1. Protect credentials - Never share your login
2. Report issues - Tell admin if you see suspicious activity
3. Request access - Ask admin for project access rather than sharing
4. Update profile - Keep contact info current

CLI Commands

# List organization members
coditect org members list

# Invite member
coditect org members invite alice@company.com --role member

# Change role
coditect org members set-role alice@company.com --role admin

# Remove member
coditect org members remove alice@company.com

# View pending invitations
coditect org invitations list