Skip to main content

Team Management

As an organization grows, you often want to manage resources by team. The [Team Management] page lets you create teams under an organization, assign users to teams, and set team roles. Splitting into teams isolates devices, services, credentials, and more per team.

Required permission: Only an organization admin (Manager) or PlatformAdmin can create, edit, or delete teams. A TeamManager can only assign members (add/remove) within their own team.

Team roles are not changed on this screen

Every role change, including appointing and removing team managers, happens in one place: the [User Management] page. If there were two entry points for changing permissions, a guard on one could be bypassed through the other. Team roles on this screen are shown read-only. See User/Permission Management for details.

What you can do here​

  • Create / edit / delete teams: Create teams under an organization and manage their name/description.
  • Assign members: Add or remove organization users to/from a team. A user belongs to exactly one team (single-team policy) — adding a user who already belongs to another team fails.
  • Check team roles: See whether each member is a TeamManager or a Member via a badge (changes are made in [User Management]).

Key elements​

  • Stat cards: total teams · total members · number of team managers.
  • Team list table: Team name (the default team shows a Default tag) · Description · Members (member count and team-manager count) · Actions (Manage members / Edit / Delete).
  • Member management modal: the team's member list (user · team role badge · remove) and an area to add members from assignable users.

On SaaS, a PlatformAdmin has no home organization, so select the target organization in the header first, then manage that organization's teams. On-premises has a single organization, so there is no organization selection step.

How to use​

Create a team​

  1. Click the New Team button on the [Team Management] page. (Only visible to organization admins and above.)
  2. Enter the team name and description and save.
  3. The new team is added to the list. To edit the team name, use the Edit (pencil) button on the row.

Assign members​

  1. Click the Manage members icon on the target team's row to open the member management modal.
  2. In the Add member area, pick an assignable user and add them. Added users are always assigned as Member.
  3. To appoint someone as a team manager, change their role on the [User Management] page. The target must already belong to that team, so assign the team first and appoint afterwards.
  4. To remove a member from the team, use the Remove button on that row.

Organization managers do not belong to a team​

An organization manager (Manager) administers the whole organization and therefore belongs to no team. [User Management] shows their team as Unassigned, and they are not counted in a team's member total or in a team manager's "my team users" summary.

Assigning an organization manager to a team demotes them

If you put an organization manager into a team, the server demotes their organization role to Member and clears their page access permissions. The team assignment dialog warns you before this happens. When they join as a Member, it also tells you to grant page permissions again. This does not apply when they join as a team manager, since that role holds full authority within the team.

Team membership is reconciled automatically as roles change.

  • Promoting a member to organization manager removes their team membership.
  • Demoting an organization manager to member assigns them to the default team first, then changes the role. If there is no default team, the demotion does not proceed at all — this prevents leaving a member with no team. Designate a default team first.

Delete a team​

  1. Delete button on the target team's row → confirm. Deleting a team also releases that team's member assignments.
  2. The default team cannot be deleted. Set another team as the default first, then delete.

Troubleshooting​

  • Adding a member fails with "already belongs to another team": Under the single-team policy, a user belongs to only one team. Remove them from their current team first, then add them to the new one.
  • There is no team role dropdown: That is expected. Roles are changed only in [User Management] and are shown here as badges.
  • The New Team button is not visible: Creating, editing, and deleting teams requires organization-admin-or-above permission. A TeamManager can only assign members within their own team.
  • Someone was signed out after I moved or removed them: Changing team assignment invalidates that user's session. They recover by signing in again.
  • The team list is empty (PlatformAdmin): Make sure you selected the target organization in the header. Without a selected organization, you cannot manage teams.