Teams and security
Manage members, roles, permissions, 2FA, SAML, and audit history.
Teams and security
Section titled “Teams and security”- Owner: full workspace control, including billing, members, projects, security, and deletion.
- Admin: operational workspace management without transferring ownership.
- Editor: create and edit content, branches, and drafts.
- Viewer: read content and previews without changing them.
Review, publish, and billing management can be separate capabilities. Use least privilege.
Two-factor authentication uses an authenticator code and recovery codes. Recovery codes are shown once during setup; download or store them securely.
Enterprise workspaces can use SAML for centralized sign-in and directory control. SAML does not replace workspace membership or roles.
Sensitive actions such as role changes, token creation, domain changes, billing changes, reviews, and publishing should appear in the audit log.