Invite teammates and choose roles

The IAM page (Identity & Access Management) is where you add teammates and decide what they can do. Open it from Account & Platform > IAM or at console.pgbhub.com/iam.

Roles

Role	What it is meant for
Owner	The person who owns the organization. Everything, including billing and members.
Admin	Full workspace and member management.
Developer	Full SQL access, queues, containers and API keys.
Billing	Invoices, subscription and storage. Can read data but not change it.
Viewer	Read-only queries and metrics.

In practice, Owner and Admin can manage members, billing and projects. Developers can read and write data, work with containers and queues and create API keys, but cannot manage members or billing. Billing can see data and manage payment, not write it. Viewers can only read. Older members with the role Member are treated like Developers.

Invite a teammate

1. Open IAM. Under Team & IAM Access Control, choose Invite Team Member.
2. Enter the Colleague's Email Address.
3. Choose the IAM Role & Access Level: Admin, Developer, Billing or Viewer.
4. Choose a Project Access Scope: All Projects (*) or Selected Projects, then tick the projects.
5. Choose Send Invitation.

An email goes to the invitee with a link. The invitation is accepted by opening that link while signed in as the invited email address, or by registering with it. It does not work for any other address. It appears under Pending Invitations with Cancel until accepted.

Change or remove access

In the member table, each person except the primary owner has:

• Edit Access: change the role and the project scope.
• Remove: take the person out of the organization.

When someone is removed, project API keys they created are revoked, so a leaver cannot keep using a key. Create replacements for anything your applications still need. See API keys.

Good to know

• Team management on the IAM page applies to the organization you own. If you are only a member elsewhere, you can see your role under Your Access but cannot invite people there.
• Only Owners and Admins can invite, edit or remove people.
• Give people the smallest role and scope that lets them do their job. A contractor who only needs one project should get Selected Projects.
• New projects can only be created by roles that can write data; Viewer and Billing cannot.
• Restoring a whole project from a recovery point is reserved for the project's owners. See Project recovery points.
• Replacing a role later never deletes data. It only changes what the person can do from then on.