Team Management

Understanding Team Roles

Each member of your organization has one of three roles. Roles currently control team management (invitations, role changes, and removals). They do not yet restrict other actions: any member can view and change the organization’s sites, decoys, integrations, and billing.

Role Hierarchy

Role	Description	Permissions
Owner	Organization creator, or anyone an Owner promotes	All team management, including promoting to Owner and changing or removing other Owners
Admin	Manages the team	Can invite, change roles, and remove members, but cannot promote to Owner or modify Owners
Member	Regular member	Cannot manage the team

Permission Matrix

Action	Owner	Admin	Member
View team members	✓	✓	✓
Invite new members	✓	✓	✗
View and revoke invitations	✓	✓	✗
Change member roles	✓	✓*	✗
Remove members	✓	✓*	✗
Promote to Owner	✓	✗	✗

*Admins cannot modify or remove Owners.

Renaming or deleting the organization is limited to the account that created it.

---

Accessing Team Settings

To manage your team:

1. Click your profile avatar (bottom-left)
2. Select Team

You’ll see the Team Settings page with two main sections:

• Team Members: Current organization members
• Pending Invitations: Outstanding invites awaiting acceptance

---

Inviting Team Members

Owners and Admins can invite new members to the organization.

Sending an Invitation

1. Click your profile avatar (bottom-left), then Team
2. Click the Invite Member button
3. Enter the invitee’s email address
4. Select a role for the new member:
   • Admin: Can manage the team
   • Member: Cannot manage the team
5. Click Send Invitation

What Happens Next

After sending an invitation:

1. Email is sent to the invitee with a unique invitation link
2. Invitation appears in your Pending Invitations table
3. Expiration timer starts (invitations expire after 7 days)
4. Invitee clicks the link and is taken to the acceptance page

Invitation Details

Each pending invitation shows:

Field	Description
Email	The invited person’s email address
Role	The role they’ll receive upon acceptance
Invited By	Who sent the invitation
Expires	When the invitation will expire
Actions	Option to revoke the invitation

Revoking Invitations

To cancel a pending invitation:

1. Find the invitation in the Pending Invitations table
2. Click the revoke button (trash icon)
3. Confirm the revocation

The invitation link will no longer work after revocation.

---

Accepting an Invitation

When someone receives an invitation, they’ll get an email with a unique link.

Acceptance Flow

Email Link → Invitation Page → Sign In (if needed) → Accept → Dashboard

For New Users

If the invitee doesn’t have a WebDecoy account:

1. Click the invitation link in the email
2. View the invitation details (organization name, role, inviter)
3. Click Create Account to Accept (or I already have a WebDecoy account)
4. Sign up or sign in (Google, Microsoft, GitHub, or email)
5. Accept the invitation to join the organization

For Existing Users

If the invitee already has a WebDecoy account:

1. Click the invitation link in the email
2. If not logged in, sign in first
3. View the invitation details
4. Click Accept Invitation to join
5. Redirect to the organization dashboard

Invitation Page Information

The invitation page displays:

• Organization name
• Who invited them
• The role they’ll receive
• Invitation expiration date
• Accept and Decline buttons

---

Managing Existing Members

Viewing Team Members

The Team Members table shows all current organization members:

Column	Description
Name	Member’s display name
Email	Member’s email address
Role	Current role (Owner, Admin, or Member)
Joined	Date they joined the organization
Actions	Available management actions

Changing a Member’s Role

To change someone’s role (Owners and Admins only):

1. Find the member in the Team Members table
2. Click the role dropdown next to their name
3. Select the new role:
   • Owner: Full team control (use carefully)
   • Admin: Team management
   • Member: No team management
4. The change takes effect immediately

Important restrictions:

• Admins cannot promote anyone to Owner
• Admins cannot change an Owner’s role
• The last Owner cannot demote themselves; transfer ownership first

Removing a Member

To remove someone from the organization:

1. Find the member in the Team Members table
2. Click the remove button (X icon)
3. Confirm the removal

Important restrictions:

• The last Owner cannot remove themselves
• Admins cannot remove Owners
• Removed members lose all access immediately

---

Best Practices

Role Assignment Guidelines

Scenario	Recommended Role
Company executives or security leads	Owner
IT administrators or DevOps engineers	Admin
Developers and analysts	Member
External auditors or contractors	Member (note that Members can still change settings today)

Security Recommendations

1. Limit Owner count: Only essential personnel should be Owners
2. Use Admin sparingly: Give Admin access only to people who manage the team
3. Invite only people you trust with settings: every role can currently change sites, decoys, integrations, and billing
4. Review regularly: Periodically audit team membership
5. Revoke promptly: Remove access when team members leave the company

Invitation Best Practices

• Verify email addresses before sending invitations
• Set appropriate roles upfront rather than changing later
• Follow up if invitations aren’t accepted within a few days
• Revoke expired invitations to keep the pending list clean

---

Troubleshooting

Common Issues

Issue	Solution
Invitation email not received	Check spam folder; verify email address is correct
Invitation link expired	Revoke old invitation and send a new one
Cannot change someone’s role	You may not have permission (check if they’re an Owner)
Cannot remove a member	You cannot remove Owners as an Admin
Member can’t see detections	Verify they’re viewing the correct property

Getting Help

If you encounter issues with team management:

1. Check the Troubleshooting guide
2. Contact support at [email protected]

---

Next Steps

Now that your team is set up:

• Managing Properties - Organize resources across your team
• Subscriptions & Billing - Understand plan limits
• API Keys - Create keys for team automation