Skip to main content

Team Management

Invite and manage team members in your organization.

Overview​

The Team Management section allows you to:

  • Invite new team members to your organization
  • Manage team member roles (Member or Admin)
  • View team members and their status
  • Remove team members from your organization
warning

Team Management is only accessible to admin users. Non-admin users cannot invite team members or manage roles.

Accessing Team Management​

  1. Log in to your RepoRisk account at https://app.canirunthat.com
  2. Click Settings in the main navigation menu
  3. You'll see the Team Members card at the top of the Settings page (admin users only)

RepoRisk Settings Page with Team Members Card

Viewing Team Members​

On the Team Members card in Settings, you'll see a table of all current team members in your organization:

ColumnDescription
EmailThe team member's email address
NameThe team member's full name
RoleThe member's role: Member or Admin
StatusActive (member has accepted) or Pending (invitation sent)
AddedDate the team member was invited or joined
Last LoginWhen the team member last logged in (or "Never")
ActionsRemove the team member from your organization

RepoRisk Team Members Table

Available Roles​

RepoRisk supports two team member roles:

Member​

Permissions:

  • View all scans and reports
  • Submit repositories for analysis
  • Schedule scans on repositories
  • Cannot manage team members
  • Cannot access Settings page

Admin​

Permissions:

  • Full access to all scans and reports
  • Submit repositories for analysis
  • Schedule scans
  • Manage team members (invite, change roles, remove)
  • Access Settings page (team members, API keys, branding)

Inviting Team Members​

To invite a new team member to your organization:

Step 1: Open the Invite Form​

  1. On the Team Members card in Settings, look for the invite form at the top (above the team members table)
  2. You'll see fields for Email, Role, and an Invite button

RepoRisk Team Members Invite Form

Step 2: Enter Team Member Details​

  1. Email Address — Enter the email address of the person you want to invite
    • The email can be a work email, personal email, or any valid email address
    • The invited person will receive an invitation email
  2. Role — Select the role for this team member:
    • Member — Can view scans, submit repos, schedule scans (no Settings access)
    • Admin — Full access including Settings and team management

Step 3: Send the Invitation​

  1. Click the Invite button
  2. An invitation email will be sent to the provided email address
  3. The invited person will have a link in the email to accept the invitation and join your organization
  4. The new member will appear in your Team Members list with a "Pending" status until they accept the invitation
info

Pending invitations remain active. The invited person can accept the invitation at any time.

Managing Team Member Roles​

To change a team member's role:

Step 1: Locate the Member​

  1. On the Team Members table in Settings, locate the team member whose role you want to change
  2. Look for the Role column which shows a dropdown select

RepoRisk Team Members Role Dropdown

Step 2: Select New Role​

  1. Click the role dropdown for the team member
  2. Select the new role:
    • Member — Can view scans, submit repos, schedule scans (no Settings access)
    • Admin — Full access including Settings and team management
  3. The role will update immediately after you select it

The team member's role will be updated instantly. If they're currently logged in, they may see permissions changes after refreshing the page.

note

Pending (invited) team members cannot have their role changed from the table. You must resend their invitation with a different role or remove and re-invite them.

Removing Team Members​

To remove a team member from your organization:

Step 1: Open Member Options​

  1. On the Team Members table in Settings, locate the team member you want to remove
  2. Look for the trash icon button in the rightmost column

RepoRisk Team Members Remove Button

Step 2: Confirm Removal​

  1. Click the trash/remove button
  2. A confirmation dialog will appear asking you to confirm the removal
  3. The dialog will note that the member will lose access to all organization scans and reports
  4. Click Remove Member or Delete to confirm

The member will immediately lose access to your organization's RepoRisk account.

caution

Removing a team member is permanent. Their access will be revoked immediately. You can re-invite them later if needed.

Team Member Permissions Reference​

This table summarizes the permissions available for each role:

PermissionMemberAdmin
View scans and reportsYesYes
Submit repositoriesYesYes
Schedule scansYesYes
Re-scan repositoriesYesYes
Invite team membersNoYes
Manage team member rolesNoYes
Remove team membersNoYes
Access Settings pageNoYes
Modify brandingNoYes
Configure API keysNoYes

Best Practices​

Security​

  • Only grant Admin role to trusted team members who need Settings access
  • Use Member role for most team members (default)
  • Regularly review team members and remove inactive or departed team members
  • Designate at least 2 admins for organizational redundancy

Organization Management​

  • Assign admin role only to team leads or administrators
  • Limit the number of admins to reduce risk of accidental changes
  • Document your organization's team structure and member roles
  • Periodically review role assignments to ensure they match current responsibilities

Best Practices for Admin Users​

  • Only modify Settings when necessary
  • Communicate security policy changes to team members
  • Rotate admin responsibilities periodically for security
  • Remove team member access promptly when they leave the organization

Troubleshooting​

Invitation Not Received​

If a team member doesn't receive an invitation email:

  1. Check their spam or junk folder for the invitation
  2. Verify the email address was entered correctly
  3. Ask them to check their mail system for any filters or rules
  4. Use the invite form again to resend the invitation
  5. Contact Support if the issue persists

Team Member Can't Log In​

If a team member has accepted their invitation but can't log in:

  1. Verify their email address is correct
  2. Confirm they have the correct login URL (https://app.canirunthat.com)
  3. Check that their account status is Active (not Pending) in the Team Members table
  4. Ensure they're using a supported login method: email OTP, Sign in with Google, or Sign in with Microsoft
  5. Contact Support for further assistance

Role Changes Not Visible​

If a team member doesn't see permission changes after a role change:

  1. They may need to log out and log back in to see the changes
  2. Ask them to refresh the page after logging back in
  3. Clear their browser cache if the role change doesn't appear
  4. Contact Support if issues persist

Cannot Invite Team Members​

If you can't invite team members:

  1. You must be an Admin user to invite team members
  2. Contact your organization administrator to request admin access
  3. Verify the email address you're trying to invite is valid
  4. Check that the email hasn't already been invited or added

Next Steps​

  • Configure Organization Settings — Review Settings for additional team and security configurations
  • View Scans — Manage and monitor team scans in Scan History
  • Learn About Roles — Review the role definitions above for information about specific permissions