Manage team access and permissions

Team management uses a role-based model with two roles: Admin and Member, powered by Clerk Organizations. Admins can manage organization settings, billing, and team membership. Members can work with redirect rules and projects within the organization.

Invitations are sent by email and include the assigned role. Pending invitations are tracked on the team dashboard and can be revoked before acceptance. When a user accepts an invitation, they are added to the organization with the specified role and can begin working immediately.

For organizations using single sign-on, Clerk provides SAML 2.0 and OpenID Connect (OIDC) for enterprise SSO integration. Users authenticated through SSO are automatically provisioned with a default role that can be adjusted by team admins after their first login.

The role model provides two levels of access. Admins have full access including team management, billing, and organization settings. Members can create and manage redirect rules, trigger deployments, and view analytics across all projects in the organization.

Team members are scoped at the organization level — they have access to all projects within the organization. This keeps the access model simple and predictable. For agencies managing multiple clients, separate organizations provide natural isolation between client data.

All team actions are logged in the audit trail with full user attribution. Combined with the RBAC model, this gives you a complete picture of who has access to what and what actions they have taken. Team activity is also visible on the project dashboard, so administrators can monitor collaboration patterns.