Skip to navigation
Settings

Team members and permissions

Invite team members to your Runtype organization and assign roles that control organization access.

Before you begin

Switch to the organization that you want to manage. Settings > Team manages only the active organization, and it is not available in a personal account. To switch, see Switch between organizations.

Invite team members

As an organization admin, follow these steps to invite one or more people:

  1. Open Settings > Team.
  2. Click Invite Member.
  3. Enter one or more email addresses in Email addresses. To add many addresses at once, paste a list separated by commas, semicolons, spaces, or new lines.
  4. Select Member or Admin in Role.
  5. Click Send invitation. For multiple addresses, the button shows the number of invitations.

Runtype sends each invitee an email invitation to join your organization. The invitation appears under Pending Invitations until the invitee accepts it. The person then appears in Team Members.

An organization can have up to 20 members.

Fix invitation errors

If an address fails, the dialog stays open and shows an error next to that address. Addresses that succeed leave the dialog. The following list describes each error:

  • Invalid email address: correct the address and send the invitation again.
  • Duplicate email: remove the repeated address.
  • Already a member of the organization: remove the address. The person already has access.
  • An invitation has already been sent: remove the address, or revoke the pending invitation and send it again.

What the invitee sees

To join the organization, the invitee follows these steps:

  1. Open the invitation email and click the link.
  2. If the Join your team page opens, create an account, or sign in with an existing account. An invitee who is already signed in skips this page.

The dashboard opens in your organization.

Revoke a pending invitation

As an organization admin, follow these steps to cancel an invitation that has not been accepted:

  1. Open Settings > Team.
  2. In Pending Invitations, find the invitation.
  3. Click Revoke.

Roles and permissions

Use the following roles to control access to organization resources and settings.

Admin

If you have the Admin role, you have all Member permissions. You can also:

  • Manage billing, subscriptions, and the monthly spend cap.
  • Invite, promote, demote, and remove members, and revoke pending invitations.
  • Add, change, and remove the organization’s provider API keys, and choose whether the organization uses its own provider key or a Runtype platform key.
  • Configure MCP server client credentials and change MCP servers that other members added.
  • View every management API key in the organization. You manage only the keys that you created. Keys that other members created are read-only for you.

Member

If you have the Member role, you can create and edit Flows, Agents, and Products. You can manage Records and Tools, run Evals, and view logs. You can manage shared model availability, non-secret model settings, and the default model. Model settings that a Member changes apply to the whole organization.

With Member access, you cannot change billing, manage members, or change the organization’s provider API keys.

View team settings as a member

If you have the Member role, open Settings > Team to view organization members and their roles. Runtype displays a banner that says only organization admins can invite or manage members. Invite Member, the member actions menus, and Pending Invitations appear only for admins.

Change a member’s role

As an organization admin, follow these steps to change a member’s role:

  1. Open Settings > Team.
  2. Find the member.
  3. Open the actions menu at the end of the member’s row.
  4. Click Make Admin to promote the member, or click Make Member to demote the member.

Runtype applies role changes immediately. Your own row has no actions menu, so another admin must change your role.

Remove a team member

Removing a member also revokes the API keys and client tokens that the member created in this organization. Integrations and embedded widgets that use those credentials stop working immediately. Before you remove the member, replace any of their keys and tokens that production integrations use.

As an organization admin, follow these steps to remove a member:

  1. Open Settings > Team.
  2. Find the member.
  3. Open the actions menu at the end of the member’s row.
  4. Click Remove from Organization.
  5. In the confirmation dialog, click Remove Member.

The removed member loses access to the organization’s resources immediately. Flows, Agents, and other resources that the member created stay in the organization. Your own row has no actions menu, so you cannot remove yourself from this page.

Best practices

Use these practices to manage organization access:

  • Apply least privilege: start with Member access and promote people only when they need admin permissions.
  • Limit Admin access to the people who manage the organization.
  • Invite people with work email addresses to identify organization members.
  • Review the member list regularly and remove people who leave the team.

Next steps

Use these pages to continue: