Teams and roles

Everyone who works in your organisation has their own Plexivo sign-in and one role. You manage them in Access in the sidebar, which opens the IAM section.

Roles#

The same table is in Access → Roles & policies, under Built-in roles. A few decisions belong to the owner alone: session limits, verification, and asking for the organisation to be deleted.

The owner#

Every organisation has one owner: the person who created it. The owner’s role cannot be changed, and the owner cannot be removed, so an organisation is never left without someone who can pay for it.

Invite a member#

Owners and admins can invite people.

1. Open Members. Go to Access → Members and choose Invite member.
2. Enter their details. Type their Email address and choose a Role: Admin or Member.
3. Send. Choose Send invite. Plexivo emails them a link. For their safety, the link goes only to their email address: it is never shown to you.

• The link works once and expires after 7 days. The person sets their own password, or signs in with the account they already have.
• An invitation is for one email address. Someone signed in with a different address is asked to sign in with the right one.
• To resend, invite the same address again. The new link replaces the old one.
• To cancel a pending invitation, choose Revoke under Pending invitations. The link stops working at once.

To keep invitation email trustworthy, by default an organisation can send 20 invitations in any 24 hours, each person can send 30, and one address can be invited 3 times in 24 hours.

Change a role#

In Access → Members, owners and admins can change anyone except the owner between Admin and Member. Nobody can change their own role: ask another admin or the owner.

Give extra access with policies#

A custom policy adds a permission to particular members on top of their role. It never takes one away. For example, give a member billing access without making them the owner.

1. Create the policy. In Access → Roles & policies, choose New policy, enter a Name, choose its Permissions and choose Create policy.
2. Attach it. In the policy’s Attached to column, choose the member count, pick a member under Attach to member and choose Attach.

A policy covers the whole organisation. You can only grant permissions you hold yourself, so only the owner can grant billing. Disable a policy to pause what it grants, or delete it to take the access back from everyone it is attached to.

Remove a member#

In Access → Members, choose Remove next to the person. Their access ends at once:

• The API keys and CLI sessions they created in this organisation stop working.
• The policies attached to them are removed, so inviting them back starts fresh.
• They receive an email saying their access has ended. Their own Plexivo sign-in, and other organisations they belong to, are not affected.
• The removal is recorded in the audit log.

For automation that must keep working when people come and go, use a service account.