Skip to main content

Team Collaboration

Invite team members to collaborate on your KnoxCall tenant with role-based access control.

Overview

Team features:
  • 👥 Invite unlimited team members
  • 🔐 Role-based permissions (Admin, Developer, Viewer)
  • 📧 Email invitations with secure links
  • 🔄 Easy member management
  • 📊 Audit log tracking of member actions
Perfect for:
  • Dev teams managing API integrations
  • Ops teams monitoring traffic
  • Security teams auditing access

Team Roles

Administrator

Full access to everything: Can do:
  • Create/edit/delete routes
  • Create/edit/delete secrets
  • Create/edit/delete clients
  • Manage team members (invite/remove)
  • Change tenant settings
  • Roll subdomain hash
  • View/export all logs
  • Configure alerts
  • Manage billing
Cannot do:
  • Delete tenant (requires owner)
Use cases:
  • Engineering leads
  • DevOps engineers
  • Technical founders

Developer

Create and configure resources: Can do:
  • Create/edit/delete routes
  • Create/edit/delete secrets
  • Create/edit/delete clients
  • View logs and analytics
  • Test routes
  • Configure environments
Cannot do:
  • Invite/remove team members
  • Change tenant settings
  • Roll subdomain hash
  • Manage billing
  • Delete tenant
Use cases:
  • Backend developers
  • Integration engineers
  • QA engineers

Viewer

Read-only access: Can do:
  • View routes (cannot edit)
  • View logs and analytics
  • View alerts (cannot configure)
  • View team members
Cannot do:
  • Create/edit/delete anything
  • View secret values
  • Test routes
  • Configure settings
  • Manage billing
Use cases:
  • Product managers
  • Customer success
  • Junior developers
  • External auditors

Inviting Team Members

Step 1: Navigate to Team Page

  1. Click Settings in sidebar
  2. Select Team
  3. See current team members

Step 2: Invite Member

  1. Click + Invite Member
  2. Enter email address:
  3. Select role:
    ◉ Administrator
    ○ Developer
    ○ Viewer
    
  4. Click Send Invitation

Step 3: Invitation Sent

Email sent to invited user:
Subject: You've been invited to join DunderMifflin on KnoxCall

Hi,

John ([email protected]) has invited you to join the DunderMifflin
team on KnoxCall as a Developer.

[Accept Invitation]

This invitation expires in 7 days.

Step 4: User Accepts

New user:
  1. Clicks “Accept Invitation”
  2. Creates KnoxCall account
  3. Sets password
  4. Gains access to tenant
Existing user:
  1. Clicks “Accept Invitation”
  2. Logs in with existing account
  3. Tenant added to their account
  4. Can switch between tenants

Managing Team Members

Viewing Team

Team page shows:
  • Member name and email
  • Role (Admin, Developer, Viewer)
  • Status (Active, Pending invitation)
  • Joined date
  • Last active

Changing Member Role

  1. Navigate to Settings → Team
  2. Find team member
  3. Click Change Role dropdown
  4. Select new role
  5. Confirm
Effect: Immediate (user’s next request reflects new permissions)

Removing Team Member

  1. Navigate to Settings → Team
  2. Find team member
  3. Click Remove
  4. Confirm removal
What happens:
  • User loses access to tenant immediately
  • Cannot view routes, secrets, logs
  • Can no longer make changes
  • Audit logs still show their past actions
User is notified via email.

Resending Invitation

If invitation expired or email lost:
  1. Navigate to Settings → Team
  2. Find pending invitation
  3. Click Resend
  4. New invitation email sent
Invitation expiration: 7 days

Canceling Invitation

Before user accepts:
  1. Navigate to Settings → Team
  2. Find pending invitation
  3. Click Cancel
  4. Invitation link becomes invalid

Audit Logging

All team member actions are logged: View team member activity:
  1. Navigate to Monitoring → Audit Logs
  2. Filter by user email
  3. See all changes made by that member
Example log entries:
[email protected] created route "stripe-payments"
[email protected] updated secret "api-key" (added new version)
[email protected] deleted client "test-client"
Use cases:
  • Compliance audits
  • Troubleshooting configuration issues
  • Security investigations

Best Practices

1. Principle of Least Privilege

Assign minimum necessary role: Good:
Product Manager: Viewer (read-only)
Backend Dev: Developer (can configure)
Engineering Lead: Administrator (full access)
Bad:
Everyone: Administrator

2. Regular Access Reviews

Monthly:
  • Review team member list
  • Remove inactive members
  • Verify roles still appropriate
  • Check for ex-employees

3. Use Service Accounts for Automation

Don’t share personal accounts for CI/CD: Bad: Use [email protected] credentials in CI ✅ Good: Create API key for CI/CD Team members = humans only

4. Document Team Structure

Maintain team roster:
Administrators:
- [email protected] (Engineering Lead)
- [email protected] (DevOps Lead)

Developers:
- [email protected] (Backend Dev)
- [email protected] (QA Engineer)

Viewers:
- [email protected] (Product Manager)

5. Onboarding/Offboarding Process

New team member:
  1. Invite to KnoxCall tenant
  2. Share documentation links
  3. Walkthrough key routes/secrets
  4. Add to on-call rotation (if applicable)
Team member leaving:
  1. Remove from KnoxCall tenant
  2. Rotate any shared secrets they had access to
  3. Review their audit logs (last actions)
  4. Update on-call rotation

Role Permissions Matrix

PermissionAdminDeveloperViewer
View routes
Create/edit routes
Delete routes
View secrets (names only)
View secret values
Create/edit secrets
Create/edit clients
View logs
Export logs
Configure alerts
View analytics
Test routes
Invite team members
Remove team members
Change roles
Edit tenant settings
Roll subdomain hash
Manage billing
Delete tenantOwner only

Multiple Tenants

If user belongs to multiple tenants: Switch tenants:
  1. Click tenant dropdown (top-left)
  2. Select different tenant
  3. UI updates to that tenant
Each tenant:
  • Separate team with separate roles
  • User may be Admin in one, Viewer in another
  • Permissions apply per-tenant
Example:
[email protected]
├─ DunderMifflin-Prod: Administrator
├─ DunderMifflin-Dev: Developer
└─ ClientProject: Viewer

Troubleshooting

Issue: “Invitation not received”

Causes:
  • Email in spam folder
  • Typo in email address
  • Email server rejecting
Fix:
  1. Check spam folder
  2. Verify correct email
  3. Resend invitation
  4. Try different email provider

Issue: “Can’t remove team member”

Causes:
  • Trying to remove yourself (not allowed)
  • Only member (need at least one Admin)
Fix:
  • Have another Admin remove you
  • Invite another Admin first

Issue: “Permissions not working”

Cause: Browser cache Fix:
  1. Log out
  2. Clear browser cache
  3. Log back in
  4. Permissions refresh
  • Audit Logs: Track team member actions
  • Tenant Management: Overall tenant settings
  • API Keys: Alternative authentication (not tied to user)

Next Steps


Statistics: Level: beginner | Time: 5 minutes | Tags: team, collaboration, permissions, access-control