Users, roles and teams
This page covers who can do what in your workspace, how to bring people in, and how to organise them into teams.
Users and teams are managed by workspace admins under Users and Teams in the left-hand menu.
Roles
Every person has one organization role. Roles build on each other: each role can do everything the one before it can.
| Role | What it is for |
|---|---|
| Viewer | Follows incidents and on-call information. Cannot change incidents, schedules or settings. |
| Responder | Actively responds to incidents and takes part in on-call. Can update incidents, acknowledge alerts, add timeline entries and write post-mortems. |
| Admin | Administers the workspace and its incident-response setup: members, integrations, schedules, escalation paths, alert routes, settings and every team. |
| Owner | Highest level of access. Keeps all admin access and can make the most consequential workspace changes, such as billing. |
Only an owner can invite someone as an owner.
For the exact permissions behind each role, see the scope table in API keys. It is the same permission list.
Invite people
Choose Invite by email, enter one or more email addresses and pick a role. The default is Responder.
- You can paste a list: one address per line, or separated by commas or semicolons. Addresses copied from a mail client, such as
Jane Doe <[email protected]>, work too, and repeats are ignored. You can invite up to 50 people at a time. If any entry does not look like an email address, Regen lists the ones to fix before sending anything. - The invitation link is valid for 7 days.
- The person opens the link and joins with the role you chose. Depending on how your workspace signs in, they can continue with single sign-on, with Google or GitHub, or enter their name and a password of at least 8 characters.
- You cannot invite an address that already belongs to a member.
Pending invitations are listed on the Users page. For each one you can:
- Resend it. This sends a new link and the old link stops working.
- Revoke it. The link stops working immediately.
If someone opens a link that has expired, been used or been revoked, they see one generic message, not which of those it was. Ask them to request a new invitation.
Other ways to add people
- Create user directly adds a person without waiting for them to accept an email.
- Import from Slack (and Import from Teams, once Microsoft Teams is connected) creates users from people already in your chat tool.
Manage members
The Users page lists everyone with their role, and you can search by name, email or role. For each person you can:
- Edit their details and change their role. Changing a role asks you to confirm.
- Reset their password.
- Sign them out everywhere. Their account stays active, but every device is signed out.
- Deactivate them. They can no longer sign in, but they stay visible in the list for audit context. This is reversible: a deactivated person can be reactivated, for example from the Slack or Teams import list.
- Remove them permanently. Their name and email are cleared, and the email address becomes free for a new account. This cannot be undone, so use Deactivate if you might want them back. Removed people show as Removed in the list.
The list also shows whether each person is set up to be paged, so you can spot on-call people who would not receive a page.
Teams
A team groups people who own a service or a part of your system, for example "Platform" or "Payments". Teams can own on-call schedules, escalation paths and alert routes, and an alert route can escalate to a team.
To create a team, open Teams, enter a name, and add members from your active users.
Team roles
Each member has a team role, which can differ from their organization role. The team role controls work inside that team only:
- A team role adds access inside that team. It never takes access away, and it never grants administration of the organization.
- Someone's effective access to a team's resources is the higher of their organization role and their team role.
- A team admin can manage that team's members and the resources it owns, without being an organization admin.
- Organization admins can manage every team.
Changing a member's team role asks you to confirm and shows what it changes. Removing someone from a team does not change their organization role.
Anyone in the workspace can see all teams. Editing is limited to organization admins and to team admins of that team.