Team and roles¶
Manage who can access your DXDT organization from Team → Members
(https://<your-dxdt-host>/team). Membership is explicit: users must be
invited by an admin (or provisioned just-in-time through SSO).
There is no automatic join-by-email-domain.
Member list¶
The Members tab lists every member of your organization with their email, role, and join date. Your own row is marked (you). Admins additionally see a role selector and a Remove action on every row except their own.
Roles¶
Every member has exactly one role per organization.
| Role | What it grants |
|---|---|
| Admin | Full access, plus all administrative actions below. |
| Member | Standard product access. Cannot perform administrative actions. |
| Viewer | Standard product access. Cannot perform administrative actions. Can also be set as the default role for SSO just-in-time provisioning. |
Administrative actions are enforced server-side and require the admin role:
| Action | Where |
|---|---|
| Invite members | Team → Members |
| Remove members | Team → Members |
| Change member roles | Team → Members |
| Change organization settings | Team → Features / Incidents |
| Configure SSO | Team → Authentication (details) |
| View and export the audit log | /audit |
Inviting members¶
- Go to Team → Members. The invite form is shown only to admins.
- Enter the email address, pick a role (Member, Admin, or Viewer — default Member), and click Invite.
The membership is created immediately — there is no accept step. The invited user receives a notification and gets access as soon as they sign in with that email address. Inviting an email that already belongs to the organization fails with "already exists in this tenant".
Seats¶
Every membership uses one seat, regardless of role. The seat limit comes from your plan (see Plans and limits); a custom seat count can be arranged with DXDT and then overrides the plan default.
| Plan | Seats |
|---|---|
| Starter | 5 |
| Growth | 20 |
| Enterprise | Unlimited |
Current usage is shown as a Seats gauge (used / max) on
Team → Plan & Usage. Invites are blocked once every seat is used:
"Seat limit reached (X/Y). Upgrade your plan to add more users."
The same limit applies to SSO just-in-time provisioning.
Changing roles and removing members¶
Admins change a member's role directly from the role selector in the member list; the change takes effect immediately. Remove deletes the membership after a confirmation prompt and frees the seat immediately. You cannot remove yourself. Role changes and removals are recorded in the organization audit log.
Troubleshooting¶
| Symptom | Cause / fix |
|---|---|
| No invite form on the Members tab | You are not an admin of this organization. |
| "Seat limit reached (X/Y)" | All seats are in use. Remove a member or upgrade your plan. |
| "already exists in this tenant" on invite | The email is already a member. Change their role instead. |
| "admin role required" (403) | The action needs the admin role in the currently active organization. |
| Invited user cannot see your organization | They must sign in with the exact email address that was invited. |