Skip to main content

Members

The Members page is where org admins invite people, assign roles, and remove access. Everyone who uses X4RGE under your company belongs here first — then you add them to teams and projects as needed.

This is not where you configure models, budgets, or integrations — that lives in Settings, Model control, and Usage. Members answers who is in the org and what org-wide role they hold. Project access is separate.

What this page is for

You want to…Members helps you…
Onboard a new hireSend an invite with the right role
Delegate admin workPromote a trusted operator to admin
Keep access tightDefault new people to member; review stale admins
Fix mistaken invitesResend or revoke pending invitations
Offboard someone safelyRemove access and clear project memberships
Hand off the orgSuper admin transfers ownership in Settings
Org role vs project access

Org role (member, admin, super admin) controls dashboard and org-wide policy. Project membership controls which repos and agent work someone can use. A member with no projects may be blocked from agents if Require project assignment is on in Settings.

Who can see and change what

AreaTypical access
View member directoryMember (if your org allows) through admin
Invite new peopleAdmin or super admin (when Admins can invite is on in Settings)
Change roles or remove membersAdmin or super admin
Transfer org ownershipSuper admin only — in Settings → Organization
Revoke pending inviteAdmin or super admin
Manage own profileAny member (not on this page)

If you cannot invite or change roles, you may be member only — ask a super admin to promote you or send invites on your behalf.

Why members matters

Without clear membershipWith Members managed well
Orphan accounts after offboardingRemove member clears org and project access
Too many adminsSmall admin / super admin groups
New hires can't run agentsInvite → add to projects → verify sign-in
Duplicate SSO and email accountsRevoke stale invites; follow IdP runbook in Settings
No one owns org decisionsOne super admin plus a documented backup

Members is the front door for access. Pair it with Settings for invite rules and Project members for day-to-day work scope.

How members fits together

ModuleWhat it handlesTied to Members
SettingsDefault invite role, Admins can invite, SSOWho can invite and default role for new joins
Project membersRepo and agent scopeAfter someone accepts an org invite
TeamsSquad groupingOptional after org membership
Model controlModel catalogAdmin role required to change
UsageOrg spendAdmin views; seats consume plan allowance
SessionsActive sign-insRevoke after offboarding

Typical flow: invite on Membersadd to projectsconfirm they can sign in on desktop or CLI.

In practice

You want to…Do this
Add a new engineerInvite as member → add to project
Delegate dashboard opsPromote trusted operator to admin after access review
Hand off org ownershipSuper admin runs Transfer ownership in Settings
Cancel a mistaken inviteRevoke pending invitation from the list
Offboard someoneRemove member → rotate keys and reassign work — see Offboarding
Use SSO instead of emailConfigure in Settings; revoke duplicate pending invites
Find inactive adminsSort by Last active during access reviews

Invite someone

  1. Open Invite member

    Enter their work email and choose a role (see below). They receive an email with a link to join your organization.

  2. Pick the right role

    RoleAssign when
    MemberDefault — engineers and ICs who work in projects
    AdminPeople who manage models, budgets, integrations, and members
    Super adminOrg owner and backups — keep this group tiny

    When unsure, start with member and promote later.

  3. Track pending invites

    Pending rows show until the person accepts or the invite expires. Resend from the row menu if they missed the email; revoke if the invite was sent by mistake.

Invite with least privilege

Default new contributors to member. Admin is for people who run the org dashboard — models, budgets, integrations, and membership — not every engineer needs that access.

Roles at a glance

RoleIn one sentence
MemberUses agents and projects they belong to; sees personal usage where allowed
AdminRuns the org day-to-day — members, models, budgets, integrations
Super adminHighest customer-side authority — ownership, destructive org actions

Members get access to projects and repos through project membership, not org role alone. Admins shape what the whole org can use (models, spend, integrations).

What each role can do (summary)

ActionMemberAdminSuper admin
Run agents in assigned projectsYesYesYes
View org-wide usage and change budgetsNoYesYes
Invite / remove membersNoYes*Yes
Change model catalog and integrationsNoYesYes
Transfer ownership / delete orgNoNoYes

*When Admins can invite is enabled in Settings.

After they join

  1. Add to teams and projects

    From Settings and Project members, assign the person to the right teams and projects.

  2. Check project-assignment rules

    If Require project assignment is on in Settings, members cannot use agents until they belong to at least one project.

  3. Confirm they can sign in

    They should complete sign-in and open the desktop, CLI, or Agents workspace once to verify access end-to-end.

Manage existing members

  1. Change role

    Open the member row → Change role. Promote to admin only after an internal access review; demotions take effect immediately for dashboard modules.

  2. Review activity

    Sort by Last active during periodic access reviews — especially for stale admin accounts.

  3. Remove member

    Remove member revokes org access immediately and clears their project and team memberships. Reassign open work first (see Offboarding).

Transfer ownership

Only a super admin can transfer organization ownership.

  1. Choose a successor who is already in the org (often promoted to admin first).
  2. From Settings → Organization, run Transfer ownership and confirm.
  3. The previous owner usually stays admin unless you change their role separately.

Ownership transfer is always recorded in the audit log. See Governance for audit context.

Offboarding

Removal is immediate

Removing a member or revoking their session takes effect right away. Plan handoffs before you click remove.

Before removing someone:

  • Reassign in-flight agent runs and open pull requests
  • Revoke personal User API keys from Integrations if they used automation
  • Revoke active sessions in Settings → Sessions if needed
  • Rotate shared secrets they had access to if your policy requires it
  • Remove them from on-call and admin groups
Invites vs SSO

If SAML or SCIM is connected in Settings, some users may join through your identity provider instead of email invites. Revoke stale pending invites to avoid duplicate accounts — follow your IT runbook.

Questions about members?

QuestionAnswer
I was invited but can't run agentsYou may need a project — check Require project assignment in Settings
I can't invite peopleYou may need admin or Admins can invite enabled in Settings
Should every lead be an admin?Usually no — member plus project lead role is enough for most IC leads
What's the difference admin vs super admin?Super admin can transfer ownership and delete the org
Invite expired — what now?Resend from the pending row or send a new invite
Person left — are they fully off?Remove member, revoke sessions, rotate API keys — see Offboarding
Who changed someone's role?Org audit logGovernance