Members and roles

See who can do what in your organization, and invite, change, disable and remove members.

Every person in Altrum belongs to one organization and has one role in it: Owner, Admin or Member.

Roles

What you can do	Owner	Admin	Member
See AI systems, assessment results and guardrails	Yes	Yes	Yes
Add, edit, activate and deactivate AI systems	Yes	Yes	No
Run assessments and configure guardrails	Yes	Yes	Only for an AI system they own
See the members of the organization	Yes	Yes	No
Invite members, resend and withdraw invitations	Yes	Yes, never for an owner	No
Change roles	Yes	Yes, never an owner’s, and never to Owner	No
Disable, enable and remove members	Yes	Yes, never an owner	No
Edit the organization profile	Yes	Yes	No
Raise support tickets and see your own	Yes	Yes	Yes
See every support ticket in the organization	Yes	Yes	No
Receive emails about AI systems and the organization	Yes	No	No
Edit your own details	Yes	Yes	Yes
Open the AI Gateway and change its settings	Yes	Yes	No
Add and remove model provider credentials and MCP servers	Yes	Yes	No
Read logged prompts and replies, when content logging is on	Yes	Yes	No
Create and manage your own gateway keys, when an administrator allows them	Yes	Yes	Yes

The last four rows are in development. Details may change before they are available.

The owner of an AI system is the member named as its owner when it was added. Whatever their role, they can run its assessment and configure its guardrails.

Rules that always hold

• Nobody can change their own role, or disable or remove themselves. Ask another owner or admin.
• Only an owner can make someone an owner, or change an owner.
• An organization always keeps at least one active owner. The last one cannot be disabled, removed or given another role.
• One email address belongs to one Altrum account, in one organization.

Invite a member

1. Open Members

   Open Members in the sidebar and choose Invite member.

2. Send the invitation

   Enter the email address, choose the role, and select Send invitation.

The person receives an email with a link that works once and for 7 days. Open invitations are listed under the members table, with their role and expiry. Resend sends a new link and ends the old one. Withdraw cancels the invitation. You can send up to 30 invitations and resends an hour.

An address that already has an Altrum account cannot be invited.

Change a role

In the members table, open the menu at the end of the row and choose Make Admin, Make Member or, if you are an owner, Make Owner. The member is emailed, and the new role applies straight away.

Disable, enable and remove

Action	What happens
Disable	The member is signed out everywhere and cannot sign in until enabled again. Their work stays. Their personal AI Gateway keys stop working and stay off when the account is enabled again. They are emailed.
Enable	The member can sign in again, and is emailed a link to do it.
Remove	The member leaves the organization and is signed out. Their personal AI Gateway keys stop working. To bring them back, invite them again.

Each action asks you to confirm and says what will happen. The menu is not shown on your own row, and an admin sees no menu on an owner’s row.

The members table

The table lists each person’s name, email, role, status and when they were last active. Status is Active, Invited or Disabled.