Security is a team sport
Manage workspace membership and roles, link your verified account for workspace-scoped sign-in, and connect SCIM invitations within finite seat limits.
In this release
You can use this in your workspace today.
- Team and rolesThe people in your workspace, the role each one holds and when they were last active.Live
- RolesCustom roles and the permissions each one grants.Live
- SSOSingle sign-on through your identity provider.Live
- SCIMAutomatic user provisioning from your identity provider.Live
Team members
Invite people to your workspace and see the role each one holds and when they were last active.
Roles and permissions
Use a built-in role or define a custom one from individual permissions.
Single sign-on
First activate a local account and link your own provider identity. Local MFA still applies. SSO sessions are workspace-scoped; personal assessments and account settings require local password sign-in.
Workspace provisioning
SCIM issues ReadOnly invitations for local activation and acceptance, and can deactivate authorized workspace memberships within finite seat limits. It does not create or delete global accounts.
Admin
Manage workspace membership and the workspace settings your role permits.
SecurityEngineer
A security-focused role. The live role catalogue shows which permissions this release enforces.
Auditor
A review-focused role with read access. Available exports depend on the released feature.
Developer
A development-focused role. Access is decided by the backend, not the page label.
ReadOnly
Read workspace information without permission to change workspace settings.