Teams
Manage workspace users, teams, memberships, and role assignments.
Teams (Settings section) is the canonical editing surface for workspace membership. Governance shows policy overview and audit context; Teams is where you create users, invite members, assign roles, and manage team membership.
Users
- List principals in the workspace.
- Invite by email with a selected role.
- Update or revoke access for individual users.
- Bulk-assign a role to multiple selected members.
Backed by users.* RPC methods with RBAC enforcement on every mutation.
Teams
- Create, rename, or delete teams (
teams.*). - Add or remove members from a team.
- Assign team-scoped roles where your plan supports it.
Relationship to Access (Governance)
| Surface | Purpose |
|---|---|
| Teams | CRUD for users, teams, memberships, role assignment |
| Governance › Access | Capability matrix, isolation profiles, operator role tables |
When the assistant helps with "give someone access", clarify the target user or team and intended role before proposing a change — role mutations are security-sensitive.
Related screens
| Need | Go to |
|---|---|
| Role / capability matrix | Governance |
| Break-glass elevation | Governance or Security |
| Cloud tenant members (OEM) | Admin app /members |