> **Building with AI coding agents?** Install the authstack plugin with one command. This equips your agent with accurate Scalekit implementation patterns.
>
> **Recommended** (the `-y` flags skip prompts, so the command runs without an interactive terminal):
> ```bash
> npx -y @scalekit-inc/cli setup -y
> ```
>
> Global:
> ```bash
> npm install -g @scalekit-inc/cli
> scalekit setup -y
> ```
>
> Supports Claude Code, Cursor, GitHub Copilot, Codex + skills for other Agent Skills-compatible agents in `~/.agents/skills`.
> Skills: integrate-agentkit, implement-saaskit, add-mcp-oauth, implement-sso, implement-scim.
> [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# Manage team members and roles

Invite teammates to the Scalekit dashboard, give each one the Admin, Developer, Member or No Access role, and override a role for one environment.
Invite your team to the Scalekit dashboard and give each person a role that matches their work. Roles control who can view or change your SSO connections, directories, organizations and other settings. A role applies to every environment in the workspace unless you override it for one environment.

Using AgentKit? [AgentKit team members and roles](/agentkit/team-members/) lists what each role can do in AgentKit.

## Before you start

- You need the **Admin** role to invite people or change roles. Other roles can see the team but can't change it.

## Roles

| Role | For |
| --- | --- |
| **Admin** | Full access to everything, including members, roles and billing. |
| **Developer** | Build and configure your integration. Can't manage members, roles or billing. |
| **Member** | Read-only access to settings. |
| **No Access** | Can't open the dashboard. Use it to suspend someone without removing them. |

What each role can do for modular SSO and SCIM:

| Area | Admin | Developer | Member |
| --- | --- | --- | --- |
| SSO connections and domains: view | Yes | Yes | Yes |
| SSO connections and domains: create, edit and delete | Yes | Yes | No |
| Directories (SCIM): view, including synced users and groups | Yes | Yes | Yes |
| Directories (SCIM): create, edit and delete, including SCIM tokens | Yes | Yes | No |
| Organizations: view | Yes | Yes | Yes |
| Organizations: create and edit | Yes | Yes | No |
| Organizations: delete | Yes | No | No |
| Admin portal links: generate and revoke | Yes | No | No |
| Auth logs | Yes | Yes | No |
| API credentials: view and generate secrets | Yes | Yes | No |
| Webhooks: view | Yes | Yes | Yes |
| Webhooks: create and edit | Yes | Yes | No |
| Billing | Yes | No | No |
| Team, roles and environment access: view | Yes | Yes | Yes |
| Team, roles and environment access: change | Yes | No | No |

**No Access** can do none of these.

## Invite a teammate

Only people you invite can join your workspace.

1. Open **Workspace** > **Team Members** and select **Invite**.

2. Enter their **Email**, choose a **Role**, and select **Invite**.

The person appears in **Team Members** with the role you chose.

## Change a role

In **Team Members**, open the member's menu and select **Edit role**. Choose a new **Workspace role** and select **Save**.

### Give a different role in one environment

Under **Environment access** in the same drawer, select **Set override** next to an environment and choose the role for that environment only. For example, make someone an Admin in Development and a Member in Production. **Reset to Default** removes the override.

## Remove a teammate

In **Team Members**, open the member's menu, select **Remove Member**, and confirm with **Delete**. To block access but keep the person's record, give them **No Access** instead.

## Create a custom role

When the four roles don't fit, open **Workspace** > **Roles** and select **Create role**. Give it a **Role name** and **Description**, then choose its **Permissions**, or start from a preset such as **Support** or **Billing Owner**. You can only grant permissions your own role has.

Custom roles appear in the **Role** list when you invite or edit a member.

## Check it worked

Ask the teammate to sign in to the dashboard. In **Team Members**, their row shows the role you gave them. Open **Edit role** to see their **Effective role** in each environment.


---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |