Manage who has access to your Vidoc project and what they can do.
Inviting Members
- Go to Settings → Team
- Click “Invite Member”
- Enter their email address
- Select a role
- Click “Send Invite”
The invited user receives an email with instructions to join.
Roles
| Role | Permissions |
|---|
| Owner | Full access, can delete project |
| Admin | Manage settings, members, integrations |
| Member | View/manage issues, run scans |
| Viewer | Read-only access to issues |
Permission Details
| Action | Owner | Admin | Member | Viewer |
|---|
| View issues | ✅ | ✅ | ✅ | ✅ |
| Run scans | ✅ | ✅ | ✅ | ❌ |
| Ignore issues | ✅ | ✅ | ✅ | ❌ |
| Manage learnings | ✅ | ✅ | ✅ | ❌ |
| Create API keys | ✅ | ✅ | ❌ | ❌ |
| Manage integrations | ✅ | ✅ | ❌ | ❌ |
| Invite members | ✅ | ✅ | ❌ | ❌ |
| Change roles | ✅ | ✅ | ❌ | ❌ |
| Delete project | ✅ | ❌ | ❌ | ❌ |
Managing Members
View Team
- Go to Settings → Team
- See all members and their roles
- Check pending invitations
Change Role
- Find the member in the list
- Click the role dropdown
- Select new role
- Confirm change
Remove Member
- Find the member in the list
- Click “Remove”
- Confirm removal
Removed members immediately lose access. Any API keys they created remain active until revoked.
Pending Invitations
Resend Invite
- Find the pending invitation
- Click “Resend”
- New email is sent
Cancel Invite
- Find the pending invitation
- Click “Cancel”
- Invitation is invalidated
Single Sign-On (SSO)
SSO is available on Enterprise plans. Contact support to configure.
Enterprise organizations can use:
- SAML 2.0
- Google Workspace
- Okta
- Azure AD
Best Practices
Use Appropriate Roles
- Viewer for stakeholders who only need to see issues
- Member for developers who need to run scans
- Admin for security team leads
Regular Audits
- Review team members quarterly
- Remove inactive users
- Verify roles are appropriate
Offboarding
When a team member leaves:
- Remove them from the project
- Revoke any API keys they created
- Review recent activity for their account
Multiple Projects
Each project has its own team:
- Members must be invited to each project
- Roles are project-specific
- A user can be Admin in one project and Viewer in another
Related Pages