Organization and team
Members, roles, invitations, and the settings an admin owns.
Settings has your account and your organization. The tabs: Account, Organization, Knowledge, Skills, Integrations, MCPs, Usage, Shared links.
Account
Your own profile — name, email, preferences. Personal, not organizational.
Organization
Your company: its members, their roles, and pending invitations.
Roles
| Role | Can |
|---|---|
| Admin | Manage the organization and its team members, plus integrations and credits |
| Editor | Create and edit content — agents, scorecards, training plans, bots. Invite Viewers only |
| Viewer | View content |
An Editor can invite people, but everyone an Editor invites joins as a Viewer. Only an Admin can grant Editor or Admin.
Inviting
Enter first name, last name and work email, pick the role, and send. They're notified by email to join.
If your domain uses single sign-on, you don't need to invite everyone — accounts are created on first sign-in, as Viewers.
Full guidance on who should get which role is in invite your team.
What only an Admin should own
Three things, because each has blast radius beyond one person's work:
- Integrations. Connecting or disconnecting one changes what every agent can see and write (integrations).
- MCP servers. Each one is a tool agents will actually use (MCP connections).
- Credits. Consumption is organization-wide (credits and usage).
Offboarding someone
Work through it in this order, because the last two are the ones people forget:
- Remove them from the organization. Disabling them in your IdP isn't enough unless your domain is SSO-only — see single sign-on.
- Reassign the agents they owned — an orphaned agent keeps running with nobody reading its failures (agents overview).
- Check Shared links for links they created and revoke what should end with them (shared links).
- Rotate any API keys only they knew.
A quarterly admin pass
- Who has Admin? Two is usually right; six is a smell.
- Does anyone still have a password on a domain that should be SSO-only?
- Which integrations are connected but not synced recently? Reconnect or remove.
- Which agents are Active but nobody reads? Deactivate rather than delete, so the history survives.
- Which shared links are still live from finished engagements?
- Is credit consumption where you expect, and which agents drive it?