Team and sign-in
Who can do what in your organization, and how people sign in: with a password and MFA, or with Google or Microsoft.
Your organization has its own user pool, apart from every other organization's, and signs in at its own address. Forgot it? Find my organization emails it to you.
Roles
Each person has an organization role, and a role in each workspace they're a member of.
| Role | Can |
|---|---|
| Owner | Everything an admin can, plus billing, plan changes and renaming the organization. Every organization has one. |
| Admin | Create workspaces, invite people and change their roles, choose how people sign in, and turn the AI assistant on or off. |
| Member | Use the workspaces they've been added to. |
| Workspace admin | Connect and configure asset and cost sources, change the workspace's settings, manage its members, dismiss savings and close anomalies. |
| Workspace viewer | Search the inventory, changes, findings and costs of the workspace, review anomalies and ask the assistant. |
Invitations
Admins invite people by email, with their organization role and workspaces. An invitation expires after 7 days, and can be sent again.
Passwords and MFA
Someone signing in with a password also enters a code from an authenticator app, every time. Their first sign-in replaces the invitation's temporary password and sets up the app. A forgotten password is reset with a code sent by email.
Signing in with Google or Microsoft
An admin turns each provider on in the organization's settings. Google sign-in can be limited to your Google Workspace domains. Microsoft sign-in is bound to your Entra ID tenants. People keep the same account and roles however they sign in, and rely on their provider's own MFA.
Microsoft sign-in is in beta, on request. Ask for access from the Help menu in the app: it opens a support request.
On the Team and Enterprise plans, admins can also:
- Require Google or Microsoft for everyone but the owner, who keeps a password. Nobody else can set one.
- Let people join without an invite, from your domains or tenants, with the role and workspaces you choose.
The Users list shows how each person signs in.