---
title: Teams
description: Manage workspace users, teams, memberships, and role assignments.
---

**Teams** (Settings section) is the canonical editing surface for workspace membership. [Governance](/docs/using-the-app/governance) shows policy overview and audit context; **Teams** is where you create users, invite members, assign roles, and manage team membership.

## Users

- List principals in the workspace.
- Invite by email with a selected role.
- Update or revoke access for individual users.
- Bulk-assign a role to multiple selected members.

Backed by `users.*` RPC methods with RBAC enforcement on every mutation.

## Teams

- Create, rename, or delete teams (`teams.*`).
- Add or remove members from a team.
- Assign team-scoped roles where your plan supports it.

## Relationship to Access (Governance)

| Surface | Purpose |
|---|---|
| **Teams** | CRUD for users, teams, memberships, role assignment |
| **Governance › Access** | Capability matrix, isolation profiles, operator role tables |

When the assistant helps with "give someone access", clarify the target user or team and intended role before proposing a change — role mutations are security-sensitive.

## Related screens

| Need | Go to |
|---|---|
| Role / capability matrix | [Governance](/docs/using-the-app/governance) |
| Break-glass elevation | [Governance](/docs/using-the-app/governance) or [Security](/docs/using-the-app/security) |
| Cloud tenant members (OEM) | Admin app `/members` |