Team

Invite colleagues, assign roles, and manage access to your company workspace.

Who can access Team?

The Team page is visible in the portal navigation only for users with the admin role. Managers and viewers work inside the workspace but cannot open team management or send invitations.

The first user who creates a company workspace during registration is always admin. That first admin cannot be demoted or removed through the team UI.

Roles

Role	Typical use	Notable restrictions
Admin	Company owner, IT lead	Full workspace access; team invites; project license allocation; delete projects/groups; CLI token management; reset onboarding
Manager	Engineering lead, integrator	Create/edit projects, groups, devices, boot configs; cannot change license allocation or delete projects/groups
Viewer	Read-only stakeholder	View workspace data; same write restrictions as manager for destructive/admin actions

All roles must belong to the same company workspace. Users only see projects, devices, and licenses for their company.

Inviting a team member

Go to Team (admin only).
Under Invite a team member, enter the colleague's email.
Choose a Role: Viewer, Manager, or Admin.
Click Send invite.

The portal emails a link to /invite/{token}. The invitee creates an account or logs in and is attached to your company with the assigned role.

Pending invitations appear in the Pending Invitations table with expiry time. Admins can Revoke an invite before it is accepted.

Managing members

The Members table lists everyone in the company:

Change role — use the dropdown on any member except yourself (admins only).
Remove — detaches the user from the company; they lose access to your workspace data.
You cannot remove yourself or change your own role from this page.

Joining via invitation

Open the invitation link from email.
Register a new account or log in with an existing GraphLab Portal account.
Accept the invitation — you are linked to the inviter's company with the preset role.

If you register a new company instead of accepting an invite, you become admin of that separate workspace — invitations do not merge companies automatically.

Admin-only workspace actions

Beyond team management, admin is required for:

Project license allocation — assign company device license slots to projects
Delete project — remove devices first, then delete the project (including the evaluation workspace)
Delete group — remove devices from the group first
CLI provision tokens — generate, rotate, revoke on group pages
Reset onboarding progress — under Account → Settings

Managers and viewers can still create projects, groups, register devices, provision licenses, and edit boot configs when onboarding is complete.

Troubleshooting

Issue	What to check
No Team menu item	Only admins see Team; ask an admin to upgrade your role
Invite email not received	Spam folder; revoke and resend; email must not already be a member
Cannot invite — already a member	User already belongs to this company
Invite expired	Send a new invitation from Team
Manager cannot allocate licenses	Expected — license allocation is admin-only