Members and roles
Invite people to a Veriom workspace, choose their role, and change or remove access. Includes what each role can do.
This page is for a workspace Admin or Owner. Every person in a workspace has one role. The role decides what they can see and change.
Invite a member
- Open Settings and select Members.
- Click Invite member.
- Enter the person's Email and choose a Role. The default is Developer.
- Click Send invitation. Confirm your identity if Veriom asks.
The person gets an email with a link. It expires after 7 days. They click Accept invitation and sign in, or create an account if they do not have one.
Members are unlimited on every plan, so an invitation never waits for a seat. A workspace can have up to 500 invitations waiting for an answer at once. You can Resend an invitation or click Revoke invitation from the members list.
Only an Owner can invite an Admin. Nobody can be invited as an Owner. The person who creates a workspace is its first Owner.
What each role can do
Each role can do everything the role above it in this table can do, and more.
| Role | In one line | Adds these abilities |
|---|---|---|
| Viewer | Inspect evidence and results | Read audits, findings, reports, repositories, decisions, usage, and members |
| Developer | Request audits and remediation | Start audits, upload ZIP files, send evidence, update findings, request fixes, and export reports |
| Analyst | Approve findings and reports | Approve reports, fixes, and agent actions, record decisions, and manage compliance |
| Admin | Members and policy control | Invite and manage members, connect repositories and tools, set policies, create API tokens, and approve decisions |
| Owner | Workspace and security control | Everything, including single sign-on, deleting the workspace, and revoking connectors |
Settings at a glance lists which settings pages each role can open.
Change a role or remove a member
- Open Settings and select Members.
- Find the person and choose a new role, or click Remove member.
- Confirm your identity if Veriom asks.
Rules:
- Only an Owner can change or remove an Owner or an Admin.
- A workspace always keeps at least one Owner.
- The person gets an email when their role changes or when they are removed.
Settings at a glance
| Settings page | Who can open it | What it holds |
|---|---|---|
| Profile, Security, Notifications | Everyone | Your own name, sign-in methods, and alerts |
| General | Everyone (changes need Admin) | Workspace name, data retention, data export, and deletion |
| Members | Everyone (changes need Admin) | People, roles, and invitations |
| Usage & plan | Everyone (changes need Admin) | Plan, limits, and processing units |
| AI models | Everyone (changes need Admin) | Model routing and your own model keys |
| Activity log | Everyone | A record of every change in the workspace |
| API tokens | Admin and Owner | Tokens for CI, MCP, and scripts |
| Automation | Admin and Owner | Autonomy and what agents may do |
| Access policy | Admin and Owner | Allowed networks, idle sign-out, required two-factor |
| Single sign-on | Admin and Owner | SSO providers and SCIM |
Confirming your identity
Sensitive changes ask you to confirm it's you with your password, a two-factor code, or a passkey. The confirmation lasts 10 minutes on that device. Inviting, changing roles, removing members, creating API tokens, and billing changes all need it.
If something goes wrong
| Problem | Fix |
|---|---|
| The invitation link says it is invalid or expired | Ask an Admin to click Resend |
pending_invitation_limit | The workspace has 500 invitations waiting for an answer. Revoke some, or wait until people accept them |
| You cannot pick Admin in the role list | Only an Owner can invite or promote an Admin |
step_up_required | Confirm your identity when Veriom asks, then try again |
Was this guide useful?
Your response stays in this browser unless you open a GitHub issue.