Your team

Your PolicyArc account is an organization. Everyone you invite joins that organization and shares its environments. Team management lives on the dashboard's Settings page.

Every role can administer your policies

There is no read-only role today. Admin, Operator and Member all get full administrative access to every running environment's admin portal, including editing policy. The roles differ in who can create and destroy environments, and who can manage the team.

Invite people accordingly. If you need a genuine viewer role, tell us.

The three roles

	Admin	Operator	Member
See the organization's environments	Yes	Yes	Yes
Open an environment's admin portal, and read and edit its policies, clients, connectors and resources	Yes	Yes	Yes
Create, start, stop and delete environments	Yes	Yes	No
Invite and remove members, change their roles	Yes	No	No
Manage the organization and its subscription	Yes	No	No

Admin is the owner role. Give it to whoever should be able to add and remove people, and who is accountable for the subscription.

Operator runs the platform day to day. An Operator creates, starts, stops and deletes environments and administers what is inside them, but cannot manage the team.

Member is the narrowest role available, but it is not a viewer. A Member cannot create or destroy an environment, and cannot touch the team. Inside any environment that is already running, a Member has the same administrative reach as an Admin.

Invite someone

You need the Admin role.

1. Go to Settings in the dashboard. The Team section lists your members.
2. Select Invite member.
3. Enter their Email address and pick a Role.
4. Select Send invite.

The invitation appears in the pending invitations list until they join. Its heading shows the count, for example 1 pending invitation.

What they receive

An invitation email from PolicyArc. It names you, your organization and the role, with a short summary of it, and it carries an Accept invitation button. If the person has never verified an email address with PolicyArc, they also get a Verify your PolicyArc email message when they first sign in.

How they accept

The link in the email only works for the email address you typed. They must sign in with that address. A different address, such as a personal one or an alias, cannot accept it.

There is nothing to copy or paste. The button takes them to the sign-in page, and they join as soon as they sign in with the invited address.

Manage outstanding invitations

Invitations expire after 7 days. The date is printed in the email so the recipient knows, and the expiry is shown in the pending invitations list.

To resend, invite the same address again. That issues a fresh invitation with a new 7-day deadline. If several are outstanding for one address, any link that has not expired works, and accepting one withdraws the others.

To withdraw, click Withdraw on its row in the pending invitations list.

Withdrawing is silent

Nobody tells the invitee. If they select their original button afterwards, they see This invitation link is invalid or has already been used. Let them know yourself if it matters.

Remove someone

On Settings, select the trash icon next to the person, then Remove in the Remove member dialog. This removes them from your organization.

Removing a member does not touch anything they created. Environments, policies and registered clients stay.

Changing a role

An Admin can change another member's role from the role list on Settings. It takes effect on their next request. They do not need to sign out. You cannot change your own role.

Any Admin can remove any other member, including another Admin. The dashboard will not demote or remove the last Admin. Keep at least two so the organization never depends on one person.

Who gets told what

Email	Goes to
Invitation	The invited address
"Your PolicyArc account is ready"	The organization's Admins only

The activation message goes only to Admins because it ends in a Create your environment button, and a Member cannot create an environment.