Roles and permissions
| Role | Who it’s for | What they can do |
|---|---|---|
| Owner | The primary account holder or security lead | Full access: edit settings, manage billing, invite and remove all members including Admins, delete the workspace. |
| Admin | Security managers or team leads | Edit all settings, invite and remove Members and Viewers, manage controls and evidence, access all reports. Cannot remove the Owner. |
| Member | Day-to-day security practitioners | View and update controls, upload evidence, manage tasks, and view reports. Cannot edit workspace settings or manage team membership. |
| Viewer | Executives, stakeholders, or read-only reviewers | Read-only access to controls, evidence, reports, and the risk dashboard. Cannot make any changes. |
MSP and partner access
If your workspace is managed by an MSP or SecurAtlas partner, your partner’s users can access and edit your workspace settings without holding a direct membership role. This lets MSP teams manage your compliance program on your behalf without consuming a named seat. You can see which members are directly assigned in the Team Members section of Settings. Partner-managed access is separate and controlled through the MSP portal — contact your partner if you need to change that access.Invite a team member
You must be an Owner or Admin to invite new members.Enter the email address
In the Invite a team member section, type the email address of the person you want to invite.
Select a role
Choose the role from the dropdown: Admin, Member, or Viewer. The Owner role cannot be assigned through the invite flow — it must be transferred from an existing Owner.
Pending invites
The Pending Invites list shows all invitations that have been sent but not yet accepted. Each entry shows the email address and the date the invite was sent. You can cancel a pending invite at any time by clicking Revoke next to the invite. The invitation link becomes invalid immediately. If an invitee does not receive the email, ask them to check their spam folder. You can resend by revoking the existing invite and sending a new one.Manage existing members
To view or change the role of an existing member, scroll to the Team Members list in Settings. Each row shows the member’s name, email, and current role.- Change a role — Click the role badge or dropdown next to the member’s name and select a new role. The change takes effect immediately.
- Remove a member — Click Remove next to the member. The user loses access to the workspace immediately. Their historical contributions (controls, evidence uploads, tasks) are preserved.
Next steps
Organization settings
Configure your organization profile, financial inputs, and evidence expiry.
Grant auditor access
Share a read-only view with external auditors without adding them as workspace members.