Access Control

Control who can access your projects and what they can do.

Role-Based Access

Organization Roles

Role	Permissions
Owner	Full access, billing, delete org
Admin	Manage members, projects, settings
Member	Create and edit projects
Viewer	View only

Project Roles

Role	Permissions
Owner	Full project control
Editor	Edit content, comments
Commenter	Add comments only
Viewer	View only

Managing Members

Invite Members

1. Go to Settings → Members
2. Click Invite
3. Enter email and select role
4. Send invitation

Update Roles

1. Find member in list
2. Click role dropdown
3. Select new role
4. Changes apply immediately

Remove Members

1. Find member in list
2. Click Remove
3. Confirm removal

SSO (Business+)

Configure SAML SSO:

1. Settings → Security → SSO
2. Enter IdP metadata URL
3. Configure attribute mapping
4. Enable SSO

Supported providers:

• Okta
• Azure AD
• Google Workspace
• OneLogin
• Custom SAML 2.0

Two-Factor Authentication

Require 2FA for all members:

1. Settings → Security
2. Toggle Require 2FA
3. Members have 7 days to set up

Session Management

• Sessions expire after 7 days of inactivity
• Force logout all sessions from Settings
• View active sessions and devices

API Key Permissions

Create scoped API keys:

{
  "scopes": ["read:projects", "write:comments"],
  "expiresAt": "2025-01-01"
}