Team members

Manage who belongs to your organization from the terminal. All of these commands require the API key to belong to an owner or admin, and all except list require a write key.

list

oneguard teams list

ID: 12ab34cd | Email: you@example.com | Role: owner
ID: 56ef78ab | Email: dev@example.com | Role: member

The 8-character prefix, or the member's email, is what role and remove accept.

invite

oneguard teams invite --email dev@example.com --role member

| Option | Default | | | --- | --- | --- | | --email | required | Address to invite | | --role | member | owner, admin, member or finance |

Sends an invitation email valid for seven days. Inviting someone who is already a member, or who already has a pending invitation, is rejected rather than duplicated.

role

oneguard teams role --member dev@example.com --role admin
oneguard teams role --member 56ef78ab --role finance

| Option | | | | --- | --- | --- | | -m, --member | required | Email, or id / 8-character prefix | | --role | required | owner, admin, member or finance |

remove

oneguard teams remove --member dev@example.com --yes

| Option | | | | --- | --- | --- | | -m, --member | required | Email, or id / 8-character prefix | | -y, --yes | required | Confirms the removal |

Removes the member from the organization and revokes their per-project access along with it. --yes is required because this cannot be undone from the CLI — the person would have to be invited and accept again.

Who can change what

| Caller | Can act on | | --- | --- | | Owner | Any member, any role | | Admin | Members and finance users only |

Specifically, an admin cannot modify or remove an owner, modify or remove another admin, or promote anyone to admin or owner. These checks run on the server, so they hold no matter which client is calling.