Users & Team Management
Invite teammates, assign roles, transfer ownership.
Roles
| Role | Can | Cannot |
|---|---|---|
| Owner | Everything | Be removed without transferring ownership first |
| Admin | Manage servers, alerts, billing, members | Transfer ownership |
| Member | View dashboards, ack alerts, edit own workbooks | Manage members or billing |
| Viewer | Read-only access to everything | Modify any state, ack alerts |
Most teams operate fine with Member as the default and a couple of Admins. Viewer is for the auditor / exec / sales-engineering use case where someone needs to see but not touch. Owner is whoever pays.
Inviting
Settings → Team → Invite member. The invitee gets an email with a one-click signup link tied to your org. The link is good for 7 days. They create a MonPG account (or sign into an existing one) and land in your org with the role you picked. No back-and-forth.
Removing a member
Settings → Team → ⋯ → Remove. Access disappears immediately. Their workbooks stay — they get reassigned to the org rather than deleted, on the assumption that someone else might need them.
Transferring ownership
Owner row → ⋯ → Transfer ownership. The new owner has to already be Admin. After transfer, the old owner becomes Admin. We make this an explicit step (rather than just "edit the role") because losing ownership without realizing it is the kind of thing that surfaces months later when nobody can change billing.
SSO / SAML
Enterprise plan only. Settings → SSO → configure SAML IdP. Users sign in via your IdP and MonPG provisions accounts on first login (JIT). SCIM provisioning is on the roadmap; for now, deprovisioning is "remove from IdP + remove from MonPG" — two-step until SCIM lands.