> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/system-management/settings/settings-team.md).

# Team

In Team settings, super admin users can view and manage team members who use the DoControl platform.

{% hint style="warning" %}

* You need **super admin** permission to access **Team** settings.
* Admins and viewers cannot access Team settings.
* To access Settings, click the **Settings** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FWkfN1O2BKZBlrnVXQ5Wu%2Fsettings%20icon.png?alt=media&amp;token=9336f06e-7a3c-4651-97c7-a1ccd2cbface" alt="" data-size="line"> icon in the top-right corner from any screen.
  {% endhint %}

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FHqV04lOsfcSlG6xThiJJ%2FTeam%20settings.png?alt=media&amp;token=14ba441b-20d2-4cbb-bf3a-df0225bf64e6" alt=""><figcaption><p>Team settings can be accessed by super admin users only</p></figcaption></figure>

## Role-based access permissions (RBAC)

There are 3 types of users who can access the DoControl platform, based on role-based access control (RBAC) permissions:

* **Super admin** - Can leverage all of DoControl functionality, **including** Team settings.\
  For example, super admin users can configure workflows, alerts, settings, lexical lists, and connectors. Super admins can run workflows, apply inventory actions and remediations, create API keys, and integrate DoControl with SaaS apps.
* **Admin** - Can leverage almost all DoControl functionality, **except for** Team settings.\
  For example, admin users can configure workflows, alerts, lexical lists, and connectors. Admins can run workflows, apply inventory actions and remediations, create API keys, and integrate DoControl with SaaS apps.
* **Viewer** - Can only read and filter data, without making any changes. Cannot access Settings.\
  For example, viewers cannot edit workflows, assign team members to alerts, or perform remediation actions. \
  For a complete list of functionality available to viewers, see [What can viewers do?](#what-can-viewers-do)

## Team metadata

Only **super admin** users can view and manage team metadata. At a glance see how many team members are assigned each permission:

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FTh7YmiR5u1d7Bn8VRGit%2FRBAC%20summary.png?alt=media&amp;token=2fe97099-2864-4073-9408-d8ac33039f39" alt=""><figcaption></figcaption></figure>

&#x20;Team metadata includes the following for each team member:

<table><thead><tr><th width="163.71428571428572">Field</th><th>Description</th></tr></thead><tbody><tr><td>First name</td><td>Private name of DoControl team user</td></tr><tr><td>Last name</td><td>Surname of DoControl team user</td></tr><tr><td>Email</td><td>Email of DoControl team user (must belong to company domain)</td></tr><tr><td>Account status</td><td>Enabled or disabled</td></tr><tr><td>Login status</td><td><ul><li><strong>Force change password</strong> - After initial login, the user must change the password. </li><li><strong>Confirmed</strong> - The user successfully logged into the system, and changed the password.</li></ul></td></tr><tr><td>Permission</td><td><p><a href="#role-based-access-permissions-rbac">Role- based permissions </a>for accessing DoControl: </p><ul><li><strong>Super admin</strong> - Can access all DoControl functionality, including Team settings</li><li><strong>Admin</strong> - Can access almost all DoControl functionality, except for Team settings.</li><li><strong>Viewer</strong> - Can view, filter and sort data, without making changes. Cannot access Settings.</li></ul></td></tr><tr><td><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FqycbV3R1DcyMxW3629YD%2Fimage.png?alt=media&amp;token=e97866a3-7138-4042-88c7-5f6dd6193204" alt="">More</td><td><p>Possible actions you can apply to users: </p><ul><li><a href="#revoke-access">Revoke access</a> - Remove login permission from a team member, after which their account status becomes disabled. Revoked users can be restored in the future.</li><li><a href="#grant-access">Grant access</a> - Restore login permission to a user whose access was revoked.</li><li><a href="#resend-invitation">Resend invitation</a> - Send an email invitation for login to a team member who forgot their password or didn't change their password yet.</li><li><a href="#delete-a-team-member">Delete </a>- Delete a DoControl team member. They no longer have access to the DoControl platform.</li></ul></td></tr></tbody></table>

## Manage team members

Super admin users can manage team members using the DoControl platform via these settings:

* [Assign role-based permissions](#assign-role-based-permissions)
* [Search for a team member](#search-for-a-team-member)
* [Add a team member](#add-a-team-member)
* [Delete a team member](#delete-a-team-member)
* [Revoke access](#revoke-access)
* [Grant access](#grant-access)

## What can viewers do?

Viewers are limited in the functionality they can leverage in the DoControl platform. Following is a list of everything Viewer users can or cannot do in DoControl:

| Functionality                                                                                                                                                                                            | Open to viewers                                                                                                                       | Blocked to viewers                                                                                                                                                                                                        |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [Onboarding DoControl](/docontrol-user-guide/getting-started/quick-start.md)                                                                                                                             | N/A                                                                                                                                   | Viewers cannot connect to DoControl                                                                                                                                                                                       |
| <p><a href="/docontrol-user-guide/integrations/integrations.md">Integrating</a> and <br><a href="/docontrol-user-guide/integrations/offboarding.md">offboarding</a> SaaS apps</p>                        | <ul><li>Can view integrated SaaS apps</li><li>Can request a new SaaS app integration</li></ul>                                        | Viewers cannot integrate or offboard SaaS apps                                                                                                                                                                            |
| [Organizational posture](/docontrol-user-guide/risk-management/posture.md)                                                                                                                               | <ul><li>View data</li></ul>                                                                                                           | N/A                                                                                                                                                                                                                       |
| [Inventory](/docontrol-user-guide/saas-data-monitoring/inventory.md)                                                                                                                                     | <ul><li>View, sort, and filter inventory</li><li>Search inventory</li><li>Download CSV reports</li></ul>                              | <p></p><p>Viewers cannot:</p><ul><li>Apply inventory actions</li><li>Mark as trusted domains</li></ul>                                                                                                                    |
| [Shadow apps](/docontrol-user-guide/saas-data-monitoring/shadow-apps.md)                                                                                                                                 | <ul><li>View, sort, and filter shadow apps</li><li>Search shadow apps</li><li>Provide data feedback</li></ul>                         | <p></p><p>Viewers cannot:</p><ul><li>Apply inventory actions</li><li>Classify shadow apps</li></ul>                                                                                                                       |
| [Alerts](/docontrol-user-guide/risk-management/alerts.md)                                                                                                                                                | <ul><li>View alerts</li><li>Share alerts</li></ul>                                                                                    | <p>Viewers cannot:</p><ul><li>Archive</li><li>Add note</li><li>Assign to team member</li><li>Configure</li><li>Remediate</li></ul>                                                                                        |
| [Workflows](/docontrol-user-guide/workflows/workflow-overview.md)                                                                                                                                        | <ul><li>View workflow list</li><li>View executions, activity and details</li><li>Filter activity by status</li><li>Export</li></ul>   | <p></p><p>Viewers cannot:</p><ul><li>Create or edit</li><li>Duplicate</li><li>Activate</li><li>Deactivate</li><li>Delete</li></ul>                                                                                        |
| [Inventory actions](/docontrol-user-guide/workflows/inventory-actions-quick-actions.md) and [remediation actions](/docontrol-user-guide/workflows/define-workflow-settings/action-settings/remediate.md) | N/A                                                                                                                                   | <p>Viewers cannot:</p><ul><li>Apply inventory actions</li><li>Apply bulk actions</li><li>Apply any remediation</li></ul>                                                                                                  |
| [Events](/docontrol-user-guide/saas-data-monitoring/events.md)                                                                                                                                           | <ul><li>View, sort, and filter events</li><li>Search events</li><li>Download CSV file</li><li>View assets</li><li>View JSON</li></ul> | N/A                                                                                                                                                                                                                       |
| [Reports](/docontrol-user-guide/saas-data-monitoring/reports.md)                                                                                                                                         | <ul><li>View, sort, and filter reports</li><li>Search reports</li><li>Download CSV file</li></ul>                                     | <p></p><p>Viewers cannot:</p><ul><li>Delete reports</li></ul>                                                                                                                                                             |
| [Content scans](/docontrol-user-guide/saas-data-monitoring/content-scans.md)                                                                                                                             | <ul><li>View and sort content scans</li><li>View assets</li></ul>                                                                     | <p></p><p>Viewers cannot:</p><ul><li>Create reports</li><li>Download reports</li><li>Delete reports</li></ul>                                                                                                             |
| [Settings](/docontrol-user-guide/system-management/settings.md)                                                                                                                                          | N/A                                                                                                                                   | <p>Viewers cannot:</p><ul><li>Access any tab in Settings</li></ul>                                                                                                                                                        |
| [Team](/docontrol-user-guide/system-management/settings/settings-team.md)                                                                                                                                | N/A                                                                                                                                   | <p>Viewers cannot:</p><ul><li>View, sort and search team members</li><li>Add or delete team members</li><li>Change role-based permissions</li></ul>                                                                       |
| [API keys](/docontrol-user-guide/system-management/api.md)                                                                                                                                               | N/A                                                                                                                                   | <p></p><p>Viewers cannot:</p><ul><li>View API keys</li><li>Create API keys</li><li>Delete API keys</li><li>Use DoControl API</li></ul>                                                                                    |
| [Legal consent](/docontrol-user-guide/system-management/settings/legal-consent-for-pii.md)                                                                                                               | N/A                                                                                                                                   | <p></p><p>Viewers cannot:</p><ul><li>Approve PII scanning</li></ul>                                                                                                                                                       |
| [Single sign-on (SSO](/docontrol-user-guide/system-management/settings/single-sign-on-sso.md))                                                                                                           | N/A                                                                                                                                   | <p></p><p>Viewers cannot:</p><ul><li>View SSO connections</li><li>Enable login enforcement</li><li>Connect to SSO providers</li></ul>                                                                                     |
| [Lexical lists](/docontrol-user-guide/system-management/settings/lexical-lists.md)                                                                                                                       | N/A                                                                                                                                   | <p></p><p>Viewers cannot:</p><ul><li>View, sort and search lexical lists</li><li>Create or edit lexical lists</li></ul>                                                                                                   |
| [Workflow settings](/docontrol-user-guide/workflows/define-workflow-settings.md)                                                                                                                         | N/A                                                                                                                                   | <p></p><p>Viewers cannot:</p><ul><li>View email templates</li><li>View secrets</li><li>Create, edit or delete email templates</li><li>Create or delete secrets</li></ul>                                                  |
| [Connectors](/docontrol-user-guide/system-management/settings/connectors.md)                                                                                                                             | N/A                                                                                                                                   | <p></p><p>Viewers cannot:</p><ul><li>View SIEM and SOAR connectors</li><li>View webhooks</li><li>Connect to SIEM or SOAR connectors</li><li>Disable SIEM or SOAR connectors</li><li>Add, edit or delete webooks</li></ul> |
| [Audit logs](/docontrol-user-guide/system-management/audit-logs.md)                                                                                                                                      | <ul><li>View and search audit logs</li><li>Export to CSV</li></ul>                                                                    | N/A                                                                                                                                                                                                                       |

## Assign role-based permissions

{% hint style="warning" %}
You need **Super admin** permission to assign roles to DoControl users.
{% endhint %}

1. Next to a team user's name, click the **Permission** dropdown.<br>

   <div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FyZBOwB17xMAh8AgwNglI%2FRBAC.png?alt=media&amp;token=cb6b0d9d-0f5b-427d-b8ff-e7138b1e7d2a" alt="" width="176"><figcaption></figcaption></figure></div>
2. Select the relevant access level:
   * **Super admin -** Can leverage all DoControl functionality. There is no limit to the number of super admins you can have in your DoControl platform.
   * **Admin** - Can leverage almost all DoControl functionality, except for Team settings.
   * **Viewer** - Can view, filter and sort data, without making changes. Cannot access Settings.

{% hint style="info" %}

* You cannot change your own access level. The permission drop-down is grayed out.
* You need to assign at least 1 super admin user. A super admin cannot change his/her own access level. There is no limit to the number of super admin users in DoControl.
  {% endhint %}

## Search for a team member

{% hint style="warning" %}

* You need **Super admin** permission to search for team members.
* Admin users cannot view or access Team settings.
  {% endhint %}

1. From the top-right corner in any screen, click **Settings** > **Admin** > **Team.**
2. From the top-right corner, click the **Search** <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FOMu4w5mAFJoSWvuWjnHg%2Fsearch%20icon.png?alt=media&amp;token=1ffb4e64-cbe3-49db-9e6e-220bd15825ed" alt="" data-size="line"> icon.\
   ![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F2TSCUbrKELT3AObcHIeY%2Fsearch%20users.png?alt=media\&token=a7f00330-35d0-4adb-9e7c-da333c042293)<br>
3. Enter a name, and specify if it's a first name, last name or email.

## Add a team member

You can add up to 100 team members from your company domain only.&#x20;

{% hint style="warning" %}

* You need **Super admin** permission to add team members.
* For best practices on adding or deleting team members, see [DoControl videos](/docontrol-user-guide/help/videos.md#add-and-delete-users).
  {% endhint %}

<div align="left"><figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FEEtINFXd9vb4ldbZDgkL%2Fadd%20team%20member.png?alt=media&amp;token=d302921d-733e-4477-a3d0-1e5e063dce14" alt=""><figcaption></figcaption></figure></div>

1. From the top-right corner in any screen, click **Settings** > **Admin** > **Team.**
2. From the top-right corner, click **Add team member**.
3. Enter the team member's first and last name, and email.
4. Select the relevant role-based permission:
   * **Super-admin** - Can access all DoControl functionality, including Team settings.
   * **Admin** - Can access almost all DoControl functionality, except for Team settings.
   * **Viewer** - Can view, filter and sort data, without making changes. Cannot access Settings.
5. Click **Add member**. The new member is now added to the DoControl team.&#x20;

## **Resend invitation**&#x20;

You can send an email invitation for login to a team member who forgot his or her password or did not change their password yet.

{% hint style="warning" %}
You need **Super admin** permission to resend an invitation.
{% endhint %}

1. From the top-right corner in any screen, click **Settings** > **Admin** > **Team.**
2. At the end of the row for a specific user, click the ellipsis![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FqycbV3R1DcyMxW3629YD%2Fimage.png?alt=media\&token=e97866a3-7138-4042-88c7-5f6dd6193204)**More** button and select **Resend invitation**.\
   \
   ![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FNJRZYNNcb0a1dxDMj736%2FResend%20invitation.png?alt=media\&token=f298cc75-82fa-4b27-8089-ae00dcac2e50)

## Delete a team member

You can delete team members from DoControl, so they will no longer have any access to the DoControl platform.

{% hint style="warning" %}
You need **Super admin** permission to delete team members.
{% endhint %}

1. From the top-right corner in any screen, click **Settings** > **Admin** > **Team.**
2. At the end of the row for a specific user, click the ellipsis![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FqycbV3R1DcyMxW3629YD%2Fimage.png?alt=media\&token=e97866a3-7138-4042-88c7-5f6dd6193204)**More** button and select **Delete**.\
   \
   ![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F49bTk25ljaBmBEPdKsb0%2Frevoke%20access.png?alt=media\&token=4e52508d-4d47-45bb-acdc-7c9f6a7cb15a)

## Revoke access

You can remove login permission from a team member, after which their account status becomes disabled and they can no longer access the DoControl platform.

In the future, you can restore access to a revoked user. For example, if a user returns from maternity leave or unpaid vacation.

{% hint style="warning" %}
You need **Super admin** permission to revoke access.
{% endhint %}

1. From the top-right corner in any screen, click **Settings** > **Admin** > **Team.**
2. At the end of the row for a specific user, click the ellipsis![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FqycbV3R1DcyMxW3629YD%2Fimage.png?alt=media\&token=e97866a3-7138-4042-88c7-5f6dd6193204)**More** button and select **Revoke access**.\
   The user's account status changes to **Disabled**.\
   \
   ![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F49bTk25ljaBmBEPdKsb0%2Frevoke%20access.png?alt=media\&token=4e52508d-4d47-45bb-acdc-7c9f6a7cb15a)

## Grant access

You can restore access to a user whose access to the DoControl platform was revoked. For example, if a user returns from maternity leave or unpaid vacation.

{% hint style="warning" %}
You need **Super admin** permission to grant access to revoked users.
{% endhint %}

1. From the top-right corner in any screen, click **Settings** > **Admin** > **Team.**
2. At the end of the row for a revoked user, click the ellipsis![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FqycbV3R1DcyMxW3629YD%2Fimage.png?alt=media\&token=e97866a3-7138-4042-88c7-5f6dd6193204)**More** button and select **Grant access**.\
   The user's account status changes to **Enabled**.\
   \
   ![](https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FhylAnc7Sf9Ld81SODwDa%2Fgrant%20access.png?alt=media\&token=e0623603-7b44-46a1-9a36-5cdb05a55b3e)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/system-management/settings/settings-team.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.