> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sureops.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Team management

> Invite members, assign roles, and remove access from your sureops organization

Your team in sureops is the set of people who can log in, view incidents, and take action — scoped by their role. Admins and Owners manage the team from **Settings → Team**.

***

## Inviting a new member

<Steps>
  <Step title="Open Settings → Team">
    Navigate to **Settings → Team**. You will see a list of current members with their roles and status (Active, Pending, Removed).
  </Step>

  <Step title="Click Invite member">
    Enter the person's **email address** and select their initial **role**. See [Roles & Capabilities](/next/administration/roles-and-capabilities) to pick the right starting role.

    <Tip>
      Default to the least-privileged role that lets them do their job. You can always promote later — it's harder to retroactively audit over-granting.
    </Tip>
  </Step>

  <Step title="Send the invite">
    Click **Send invite**. The person receives an email with a link to create their account or log in. Their role is set the moment they accept and log in for the first time.

    The member appears in your team list with status **Pending** until they accept.
  </Step>
</Steps>

***

## Changing a member's role

<Steps>
  <Step title="Find the member">
    Go to **Settings → Team** and locate the member by name or email.
  </Step>

  <Step title="Click Edit">
    Click the **Edit** button next to their row. Select the new role from the dropdown.
  </Step>

  <Step title="Save">
    Click **Save**. The role change takes effect on their **next request** — there is no delay waiting for a session to expire.
  </Step>
</Steps>

<Warning>
  Role changes are immediate and audited. Demoting a Commander to Responder means they lose the ability to approve HITL agent actions on their next click — even if they are in the middle of reviewing an approval. Communicate changes to your team before making them.
</Warning>

***

## Removing a member

<Steps>
  <Step title="Find the member">
    Go to **Settings → Team** and locate the member.
  </Step>

  <Step title="Click Remove">
    Click **Remove** next to their row. Confirm the removal in the dialog.
  </Step>

  <Step title="Access revoked">
    The member loses access on their next request. They see a "no access" page if they try to load sureops. Their historical contributions (incident comments, approvals, audit log entries) are preserved — removal does not delete history.
  </Step>
</Steps>

<Note>
  Removing a member does not delete their account. If you re-invite the same email address later, they can rejoin with a new role assignment.
</Note>

***

## Transferring ownership

Ownership transfer is available to the **Owner** only. It is permanent — once transferred, you become the previous role (typically Admin) and the new Owner assumes full accountable authority.

<Steps>
  <Step title="Confirm the recipient">
    The recipient must already be a member of your organization. If they are not, invite them first and wait for them to accept.
  </Step>

  <Step title="Open Settings → Team → Ownership">
    Navigate to the **Ownership** section at the bottom of the Team settings page.
  </Step>

  <Step title="Select new Owner and confirm">
    Select the member you want to promote and click **Transfer ownership**. You will be asked to type a confirmation phrase before the transfer completes.

    Both your role and the recipient's role update simultaneously on confirmation — no grace period.
  </Step>
</Steps>

<Warning>
  Ownership transfer is irreversible. The new Owner is immediately the accountable party for billing, security, and compliance. Make sure you are certain before confirming.
</Warning>

***

## Pending invites

Members who have been invited but haven't accepted appear with status **Pending** in the team list. You can:

* **Resend the invite** — sends a fresh invite email with a new link
* **Cancel the invite** — removes the pending invite; the original link is invalidated

Pending members cannot log in until they accept.

***

## Bulk invite

If you need to invite many people at once, use the **Import CSV** option on the team page. Upload a CSV with two columns: `email` and `role`. sureops sends invites to each address with the specified role.

Supported role values in the CSV: `observer`, `responder`, `commander`, `admin`. The `owner` role cannot be set via CSV — ownership transfer is a separate action.

***

## Audit log

Every team management action — invite, role change, removal, ownership transfer — is written to the audit log with the actor, target, old role, new role, and timestamp. Admins and Owners can view the audit log in **Settings → Audit**.

***

## Frequently asked questions

**How many members can I have?**

There is no hard member cap. Your plan may have a seat limit — check **Settings → Billing** if you encounter an error when inviting.

**Can I have multiple Owners?**

No. sureops enforces exactly one Owner per organization at all times. This keeps accountability legible and prevents split-authority scenarios.

**Can I see who made a role change?**

Yes — every change is in the audit log with the actor's identity, the target member, and the exact timestamp.

**What happens to a removed member's API keys?**

Any API keys or tokens issued under that user's identity are revoked at removal. Active sessions expire immediately on their next request.

***

## Related

* [Roles & Capabilities](/next/administration/roles-and-capabilities) — understand what each role can do before assigning one
* [Notifications](/next/administration/notifications) — configure who gets notified for which events