Team roles and permissions
OWNER, ADMIN, and MEMBER capabilities in Team workspaces.
| Action | OWNER | ADMIN | MEMBER |
| --- | --- | --- | --- |
| Connect GitHub | Yes | No | No |
| Sync/reconcile repositories | Yes | Yes | No |
| Enable repositories | Yes | Yes | No |
| Run manual scans | Yes | Yes | No |
| View scans and posture | Yes | Yes | Yes |
| Manage billing | Yes | No | No |
| Manage members (invite/remove) | Yes | Yes | No |
| Leave workspace | Yes | Yes | Yes |
Authorization is enforced server-side on every mutation.