Add team members (Growth & Enterprise)

Share one workspace: administrators run it, viewers monitor everything and generate reports — no extra payment details ever.

1. 1Understand the roles. Cybermatic workspaces support two roles — Administrator: full control. Manage connections and credentials, run scans, add or remove assets, generate and delete reports, manage billing, and invite or remove team members. Viewer: read-and-report access. Viewers can see assets, risks, remediation, and connections, and can generate reports (using the workspace's shared report allowance). Viewers cannot run scans, add or change or delete connections or credentials, add or delete assets, delete reports, see or manage other users, or access billing. Seats by plan — Starter: single user. Growth: 1 administrator (the workspace owner) plus 2 viewers. Enterprise: up to 10 administrators and unlimited viewers.
2. 2Invite a team member. 1. Sign in as an administrator. 2. Open Settings → Team. 3. Enter your colleague's email address. 4. On Enterprise, choose their role (Viewer or Administrator); on Growth, invites are always viewers. 5. Select Send invite. They receive an email invitation. You can also use Copy signup link to share the signup page directly — the invite is tied to their email address either way.
3. 3What the invited person does. 1. They open https://cybermatic.ai/login/?signup=1 (from the email or your link). 2. They create an account using the invited email address — their own password and their own multi-factor authentication. 3. On first sign-in they land directly in your workspace. They are never shown a plan page and never asked for payment details — their access is covered by the workspace's subscription. If they sign up with a different email address than the one you invited, they'll get a separate personal workspace instead — make sure the email matches.
4. 4Manage the team. Settings → Team shows every member with their role, plus any pending invites. • Remove a member: select the trash icon — access is revoked immediately. • Change a role (Enterprise): use Make admin / Make viewer next to the member. • Pending invites can be revoked the same way before they're accepted. The workspace owner can't be removed or downgraded. Seat counts at the top of the card show how many administrator and viewer seats are in use.
5. 5Security notes. Every member signs in with their own credentials — passwords are never shared. Each member sets up their own multi-factor authentication and is subject to the same password policy and 180-day rotation as the owner. Role limits are enforced by the Cybermatic API itself, not just hidden in the interface. If the workspace's subscription ends, access ends for all members together.

Tip: A great pattern: make your MSP or security consultant a viewer so they can watch posture and pull reports, and keep connection changes in your own hands.