Section 1.4: Team management and permissions

Everyone in your organization has one role that sets what they can reach. Owners and admins invite people with a role and choose a member's permissions one switch at a time. Open Organization in the sidebar, under Account, to see your team.

1. Organization roles

You invite people as an Admin or a Member. An owner is made from an existing member (see section 6). A Guest comes in only through an identity provider group mapping (see section 9).

2. Seats by plan

Neither paid plan has a seat minimum. The roster header shows how many seats are in use.

3. Inviting people

1. Open Organization in the sidebar. Your team is on the first tab, Team members (called Roster in some workspaces).
2. Click Invite. The Invite people window opens on One person.
3. Enter a first name, last name and email.
4. Choose a Role, Admin or Member. If your organization has teams, you can pick a Team too.
5. Click Send invitation.

If the person already has an ABRAM account, they join right away. Otherwise they get an email with a link.

Members with the Manage people switch, and team leads, see Save draft in place of Send invitation. An owner or admin sends the draft from the roster, because sending an invitation can use a seat.

Several people at once: switch the window to Import CSV. Paste a list of addresses into Emails, or choose a CSV file with the columns the window lists (email, first_name, last_name, role, team, reports_to). Up to 200 rows are saved as drafts, and nothing reaches an inbox until an owner or admin clicks Send on the roster.

Invited rows stay on the roster until they are accepted. Each has Resend and Revoke buttons, and Revoke asks you to confirm. Drafts show as Pending with Send and Discard buttons.

Out of seats? When your plan can grow, the invite window shows Additional seat required with the monthly cost, and asks you to Confirm additional seat before it sends. At the plan's limit, Invite becomes Upgrade, and the invite window reads Every seat is taken with an Upgrade plan button.

4. A member's page

Click anyone on the roster to open their page:

• Access: their role, with a plain-language summary of what that role can reach. Owners and admins can change it here. Only an owner can make someone an owner.
• Project access: every project they are crewed on, with their access level there. Change project access on each project.
• Permissions: a Member's switches (see below). Owners, admins and guests have no switches, because their role decides everything.
• HR & employment and Capacity & rate: title, department, employment details, weekly capacity and rate. Rates are visible only to people who can view financial data.
• Activity: the last 10 events for this person.
• Danger zone: Deactivate member removes their access and keeps their history. Remove from organization detaches them.

You cannot change your own role or permissions.

5. Member permissions

A Member's permissions are grouped switches. A switch for a feature your plan does not include is hidden.

Project access is a choice between All organization projects and Assigned projects only.

Import projects is available on every plan.

6. Owners and transferring ownership

Owners manage billing, roles and every member. An owner can make another active member an owner, or hand the organization over.

1. Open the member's page.
2. In Ownership, click Make owner or Transfer ownership.
3. Confirm.

• Make owner: they become an owner and you stay one.
• Transfer ownership: they become an owner and you become an admin.

See Section 1.8 for the full steps.

7. Project roles

The job roles people are crewed as, such as Director of Photography or Gaffer, live in Settings > Team & roles under Project roles. The Default tab lists the built-in roles. On Studio you can add up to 30 of your own on the Custom tab with New role. SMB / Enterprise has no limit. Role skills links each role to the skills it needs.

8. Crew on a project

Project access is separate from your organization role. On a project, each person is set to Can manage, Can edit or Crew view, and people from outside your organization can join a production without taking a seat. Outside crew cannot be set to Can manage, because that needs a seat in your organization. Outside crew per production: Free 2, Pro 10, Studio 100, SMB / Enterprise unlimited. See Section 4.3.

9. Single sign-on and directory sync (SMB / Enterprise)

On SMB / Enterprise, owners and admins set up single sign-on in Settings > Workspace > Sign-in and SSO. The same page holds IdP group mappings, which place people from your identity provider into ABRAM as a Member, Admin or Guest.

A member managed by your identity provider shows a Managed by your IdP badge on their page. Their role and name come from the identity provider and cannot be changed in ABRAM, and ABRAM does not let you remove them. Make those changes in your identity provider.

10. Audit log (SMB / Enterprise)

Owners and admins on SMB / Enterprise can review workspace events in Settings > Workspace > Audit log.