Member roles
Every user in an organization has one of these roles:| Role | Description |
|---|---|
| Admin | Full control: manage members, create runners, configure policies, view all resources |
| Member | Use shared runners and projects; cannot create runners or manage organization settings |
For delegated administration without full admin access, assign organization roles to groups. This lets you give specific teams management capabilities over runners, projects, groups, or automations.
Permissions
| Permission | Admin | Member |
|---|---|---|
| Organization | ||
| Invite members | ||
| Manage member roles | ||
| View all members | ||
| Configure policies | ||
| View audit logs | ||
| Configure SSO | ||
| Projects | ||
| Create projects | Depends on policy | |
| Share projects (as org admin) | ||
| Share own projects (as project admin) | ||
| Use existing projects | ||
| Runners | ||
| Create runners | ||
| Use runners | When shared | |
| Environments | ||
| Create from any repository | Depends on policy | |
| View all environments | ||
| Secrets | ||
| Manage project secrets | ||
| Manage personal secrets |
Change a member’s role
- Click the three-dot menu next to the member’s name
- Select Change Role
- Choose the new role and confirm
Invite members
Click Invite Members at the top of the members list. There are three ways to add members:- Invite link: copy the link and share it with your team. Anyone with the link can join. Click Reset Invite Link to invalidate existing links.
- Invite by email: enter email addresses to send invitations directly.
-
Allowed email domains: allow anyone with a matching email domain to join automatically.
