Team management

The Team Members settings page is where you invite people to SubImage, set what they can do through roles, and remove them when they leave.

Anyone on the team can see the member list. Inviting, changing a role, and removing a member require the Admin role.

Inviting people

1. Click Invite member.
2. Enter the person's email address and pick a role. The role defaults to Member.
3. Click Send.

SubImage emails the invitation, and the invite appears in the Invitations table with a Sent and an Expires date. Invitations expire after 7 days.

A pending invitation can be revoked from its row in the Invitations table. There is no resend button: to invite someone again after an invite expires or is revoked, send a new invitation.

When someone signs in through single sign-on instead of an emailed invite, their role is mapped from your identity provider. See Single sign-on for details.

Changing a role or removing a member

Use the Manage button on a member's row to change their role, and the trash button to remove them. Both require the Admin role.

You cannot change your own role or remove yourself, so an organization always keeps at least one admin.

Roles

SubImage has four roles, from least to most privileged. Each role can do everything the role below it can, plus more.

Viewer

Read-only access to your security data: issues, vulnerabilities, findings, inventory, attack paths, and packages. Viewers cannot use the AI chat, change anything, or open settings.

Member

Everything a viewer can do, plus the AI assistant and read access to settings. Member is the default role for new users.

Operator

Everything a member can do, plus the day-to-day operational actions: accepting risk on findings, enabling or disabling rules, creating custom rules, triggering syncs, and managing issues and issue routing. Operators cannot manage the team or other admin settings.

Admin

Full access. Everything an operator can do, plus team management, single sign-on and directory sync, secrets, API keys, integrations, notifications, and all other settings.