Team Management
Collaborate with your team using organizations and roles
Last updated 8 Oct 2026Get Started · article 3 of 4
Cesteral Intelligence supports team collaboration through organizations. This guide covers how to set up your team and manage access.
Organizations
An organization is a shared workspace where team members can collaborate on projects and automations.
Personal vs Organization Workspaces
| Feature | Personal | Organization |
|---|---|---|
| URL | /workspace | {org}.domain.com/workspace |
| Ownership | Individual | Shared |
| Team members | Just you | Multiple users |
| Billing | Individual plan | Organization plan |
Creating an Organization
- Click the org switcher in the sidebar footer
- Select Create organization
- Enter your organization name
- Choose a subdomain (e.g.,
acmeforacme.cesteral.com) - Click Create
Your organization workspace is now available at your custom subdomain.
Team Roles
Access is controlled through four roles, each with increasing permissions.
Role Hierarchy
| Role | Description |
|---|---|
| Viewer | Read-only access to projects and automations |
| Editor | Can create and modify projects and automations |
| Admin | Full access plus team management |
| Owner | Complete control including billing and deletion |
Role Permissions
| Permission | Viewer | Editor | Admin | Owner |
|---|---|---|---|---|
| View projects | Yes | Yes | Yes | Yes |
| Run automations | Yes | Yes | Yes | Yes |
| Create projects | No | Yes | Yes | Yes |
| Edit automations | No | Yes | Yes | Yes |
| Approve/reject governed actions | No | Yes | Yes | Yes |
| Manage budget policies | No | Yes | Yes | Yes |
| Configure guardrails | No | No | Yes | Yes |
| Delete projects | No | No | Yes | Yes |
| Manage team | No | No | Yes | Yes |
| Manage billing | No | No | No | Yes |
| Delete organization | No | No | No | Yes |
Choosing the Right Role
- Viewer: Stakeholders, clients, auditors who need to see results
- Editor: Analysts and team members doing daily work
- Admin: Team leads who manage projects and people
- Owner: Organization administrators and billing contacts
Inviting Team Members
How to Invite
- Open Settings → Organization → Members (Settings is reached from the Settings menu in the top bar, under View all settings)
- Enter the email address and select a role in the add-member form
- Send the invitation
The invitee receives an email with a link to join your organization. Inviting members requires the admin or owner role.
Invitation States
Invitations are managed through Clerk. The Invitations tab lists outstanding (pending) invitations — those still waiting for a response. Once an invitation is accepted the user moves into the Members list, and a revoked invitation drops off the outstanding list, so the tab is effectively a view of who you're still waiting on rather than a full history of every invitation state.
Invitation expiry is handled by Clerk's own default; the platform does not configure a custom expiry window.
Re-sending Invitations
There is no dedicated "resend" button. If you need to re-issue an invitation, revoke the pending one (each listed invitation has a Revoke action) and send a fresh invite to the same address from the add-member form.
Managing Team Members
Viewing Members
The Members tab on the Members page (Settings → Organization → Members) lists everyone in the organization with their name, email, and current role. A separate Invitations tab shows outstanding invites.
Changing Roles
- Find the member in the Members tab
- Open the role dropdown next to them
- Select the new role
Only admins and owners can change roles.
Removing Members
- Find the member in the Members tab
- Use the Remove action next to them
- Confirm the removal
What happens when a member is removed:
- They lose access immediately
- Their personal data remains with them
- Organization data stays with the organization
- Automations they created remain in the organization
Best Practices
Role Assignment
- Principle of least privilege: Give the minimum access needed
- Regular audits: Review team roles quarterly
- Document decisions: Note why certain roles were assigned
Onboarding New Members
- Assign appropriate role
- Share relevant project links
- Point them to documentation
- Schedule a quick orientation call
Offboarding Members
When someone leaves:
- Remove them from the organization promptly
- Review their active projects
- Reassign any owned automations
- Revoke any API keys they created
Organization Settings
Open Settings from the Settings menu in the top bar (View all settings). Under Settings → Organization you'll find organization profile and settings, members, usage, and learning. Account-level pages — account, notifications, data privacy, billing, usage, API keys, and MCP clients — live alongside them in Settings. Platform and channel connections are managed on Integrations, in the workspace sidebar. Switch between your personal workspace and organizations using the org switcher in the sidebar footer.
Subdomain Access
Your organization workspace is accessed via:
https://your-subdomain.cesteral.com/workspace
All organization data and projects are available at this URL.
Changing the Owner
To hand off ownership, promote the incoming owner to the owner role on the Members page and adjust your own role afterward (another admin or owner can change your role for you). The owner role carries full control, including billing and the ability to delete the organization.
Troubleshooting
Can't Invite Members
- Verify you have admin or owner role
- Check if your plan allows more team members
- Ensure the email address is valid
Member Can't Access
- Confirm they accepted the invitation
- Check their assigned role
- Verify they're using the organization URL
Role Changes Not Taking Effect
- Have the user log out and back in
- Clear browser cache
- Wait a few minutes for changes to propagate
Related articles
Still stuck? Browse the FAQ or contact us.