Your team and roles
Everyone in your organisation can open Team from the menu and see who is in it, with their roles. Only admins can invite people, change roles or remove someone.
Roles
- Viewer: sees everything but can't decide anything: no Keep or Snooze, and no evidence pack download (a download counts against your plan, so it is for members and admins; viewers read the pack on screen). Ask an admin if a viewer should be a member.
- Member: also keeps and snoozes findings, scans, makes leaver reports and creates tickets.
- Admin: also manages AWS accounts, the team, Slack, Teams, tickets, alerts, the tag policy, access reviews and billing.
The table lists everyone with their role. An admin can change anyone's role or remove them; a removed person can no longer sign in to your organisation. When they next open Strays they are told they were removed (for up to a week), and can start their own organisation or ask to be invited back. Someone whose role changes sees a note on their next page, and a page they already had open says their role changed if it no longer lets them do something. An organisation always keeps at least one admin, so the last admin can't be demoted or removed. Each person belongs to one organisation.
Leaving an organisation
Anyone can leave: on the Team page, choose Leave followed by your organisation's name, then confirm. You lose access straight away; the organisation and its data stay for everyone else. You are then taken to the page where you can start your own organisation, and you can be invited back by an admin. The only admin can't leave, because the organisation would have nobody to manage it: make someone else an admin first, or delete the organisation (Deleting your organisation).
Inviting people
Under Invite someone, enter their email and choose a role. They get an email with a link that works for 7 days and only once. If you'd rather send it yourself, open Invitation link beside their name under Invited. Cancel the invitation withdraws it. They sign in or sign up with that exact email and join. Before signing in, the link shows who invited them, to which organisation and as which role. Inviting an address that already has a pending invitation replaces it: the earlier link stops working at once (Strays says so), so a link you sent with too much access can be withdrawn by inviting them again with the right role. A link can say it is incomplete (it was cut short when copied: copy the whole link), already used (used once, cancelled or replaced) or expired (7 days have passed); each needs something different, so the page says which. Your plan sets how many people you can have: one on Free, no limit on Team and Business. If it's full, the Team page explains that and switches the form off; upgrade in Billing.