Invite people under Team → Invite. Invites expire after 7 days and up to 25 can be pending.
| Role | Can |
|---|---|
| Owner | Everything, including billing and deleting the organization |
| Admin | Everything except deleting the organization and managing billing |
| Security manager | Manage assets, verification, authorizations, scans, findings (including risk accepts and false positives), monitoring and reports; view members and the audit log |
| Security analyst | Launch scans, triage, assign and export findings (work states only), generate reports and verify fixes |
| Developer | View assets and scans, update finding status (work states only), comment, verify fixes and download reports |
| Viewer | Read-only, including members and support tickets |
| Billing admin | Subscription and billing, notifications and support |
Rules
- You can only grant, change or remove roles whose permissions are a subset of your own. An admin cannot create a billing admin, and only an owner can make another owner.
- The last owner can never be removed or demoted.
- The audit log records every action in your organization, including reads of your data by TasScan staff.