Everyone in an organization has one role. Roles decide what they can see and change, in the dashboard and through the MCP server alike.
Roles
| Role | Can |
|---|---|
| Owner | Everything, including billing, deleting the organization, and making others owners |
| Admin | Everything an owner can, except changing owners or making someone an owner |
| Analyst | See everything; add targets and rename them; add, change and remove schedules; run Scan now; set findings aside or reopen them |
| Viewer | See targets, schedules, findings and members; change nothing |
Every member can read the organization's approved reports.
Invite someone
Owners and admins invite from Organization → Members, under Invite someone:
- Enter their email address, pick a role and choose Send invite.
- They get an email with a link. Opening it, and signing up with that address if they're new, adds them to the organization.
An invitation that's still waiting is listed under the members, where you can revoke it. If your plan has no room for another member, the invitation is held until it does.
Change a role or remove someone
From Organization → Members, owners and admins can change a member's role or remove them. Admins can't change an owner's role or make anyone an owner. Every organization keeps at least one owner.
Two-factor authentication
Each person can require a code from an authenticator app at sign-in, under Account → Two-factor authentication. It applies to every organization they're in, and to AI tools connected through the MCP server: they ask for it when they sign in.