Roles and permissions
The four organization roles and their permissions.
| Role (as shown on screen) | What it can do |
|---|---|
| Owner (primary) | One per organization. All owner permissions and ownership transfer |
| Owner | Plan and seat payments and changes, credit top-up, team monthly usage limits, changing member roles, SSO settings |
| Admin | Invite and manage members, manage per-member usage limits and handle limit increase requests, manage organization plugins and the web search policy, view payment history. Cannot change other members' roles |
| Member | Use Keural in the organization workspace. Shown as Member in the member list. |
Transferring ownership
The primary owner can transfer the primary owner position to another member. The recipient must be a member of the organization, and the recipient's email address is entered directly to confirm. After the transfer, the former primary owner remains an owner.
Member usage limits
Admins set a monthly usage limit for each member. If an owner has turned on Allow limit increase requests, a member who reaches the limit can send a Request limit increase from the screen, and an admin reviews it and raises the limit. Limits do not increase automatically.
Resetting usage
On-premises organizations let admins reset member usage, individually or for all members.
Removing members with SCIM
If you deactivate or delete a user in your IdP, that account is suspended and cannot sign in. However, the organization roles of the primary owner and owners are not changed by SCIM.
If you add a user to the Keural Admins group in your IdP, they are synced as an admin. If you add them to the Keural Members group, they are synced as a member.