Team Management
Manage your account's users, roles, sites, and security settings from a single, centralized place.
Overview
Team Management is where account administrators control who has access to your Unbxd account and what each person is allowed to do. From one set of screens, you can invite teammates, assign their roles per site, manage account-wide security (SSO and 2FA), view all your sites, and hand over ownership of the account.
Team Management is a centralized service, so your user list, roles, and account status stay consistent no matter which region you log in from. Your profile and login details are the same everywhere, while the list of sites you can work in is specific to each region.
Access to Team Management is governed by roles. Higher-privilege roles (Owner, Super Admin, and Unbxd User) can manage the whole account, while standard site roles (Admin, Member) work inside their assigned sites and manage only their own profile.
Access Team ManagementAccount Settings > Team Management. The pages and actions you see depend on your role. If a page isn't available to your role, you'll see a No Access message.
Key Concepts
Single, Global Profile
Every user has one profile that works across all regions. Your user information (and your login) is synced globally, so you don't maintain separate accounts per region. Only the list of sites shown to you changes from region to region.
Account Access VS Site Access
There are two layers of access:
- Account-level access: managing users, sites, SSO, 2FA, and ownership. Available to Owner, Super Admin, and Unbxd User.
- Site-level access: working inside the sites you've been assigned. This is where Admin and Member roles operate. These users don't see Team Management; they manage only their own profile.
The Super Admin ole
Super Admin is an elevated role just below Owner. A Super Admin can do almost everything the Owner can: manage users, sites, SSO, 2FA, and grant the Super Admin role to others, with two exceptions. They cannot create sites and cannot transfer account ownership. An account can have a maximum of 5 Super Admins.
User Status
Each user in your account is in one of two states:
| Status | Meaning |
|---|---|
| Active | The user has accepted their invitation and can log in. |
| Invite Sent | The invitation has been sent but not yet accepted. The user cannot log in until they accept. |
The available actions for a user depend on this status. For example, you can only Edit an Active user, and only Resend invite to a user whose invite is still pending.
User Roles
Team Management uses five roles. Refer to the given table to know more.
| Role | What it's for | Key abilities |
|---|---|---|
| Owner | The top-level account holder. | Full access to everything, including creating sites and transferring ownership. |
| Super Admin | Elevated administrator (max five per account). | Full account access, including transferring ownership. Only creating sites is not allowed. |
| Unbxd User | An internal Unbxd team member is managing the account on your behalf. | Full account access, including transferring ownership. Only creating sites is not allowed. |
| Admin | Standard site-level user. | Works within assigned sites. Can manage own profile only; no Team Management access. |
| Member | Standard site-level user. | Works within assigned sites. Can manage own profile only; no Team Management access. |
Page Access Per Role
This table shows which Team Management pages each role can open.
| Page / Feature | Owner | Super Admin | Unbxd User | Admin / Member |
|---|---|---|---|---|
| Profile Page | ✓ | ✓ | ✗ | ✓ |
| Team Management List | ✓ | ✓ | ✓ | ✗ |
| Invite User | ✓ | ✓ | ✓ | ✗ |
| Edit User | ✓ | ✓ | ✓ | ✗ |
| Sites Listing | ✓ | ✓ | ✓ | ✗ |
| Account SSO | ✓ | ✓ | ✓ | ✗ |
| Account 2FA | ✓ | ✓ | ✓ | ✗ |
| Change Ownership | ✗ | ✓ | ✓ | ✗ |
Permissions by Role
This table shows which actions each role can perform.
| Permission | Owner | Super Admin | Unbxd User | Admin | Member |
|---|---|---|---|---|---|
| Toggle account-level SSO | ✓ | ✓ | ✓ | ✗ | ✗ |
| Toggle account-level 2FA | ✓ | ✓ | ✓ | ✗ | ✗ |
| Toggle per-user SSO | ✓ | ✓ | ✓ | ✗ | ✗ |
| Toggle per-user 2FA | ✓ | ✓ | ✓ | ✗ | ✗ |
| Reset another user's password | ✓ | ✓ | ✓ | ✗ | ✗ |
| Invite a new user | ✓ | ✓ | ✓ | ✗ | ✗ |
| Edit any user | ✓ | ✓ | ✓ | ✗ | ✗ |
| Grant Super Admin role | ✓ | ✓ | ✓ | ✗ | ✗ |
| Transfer ownership | ✗ | ✓ | ✓ | ✗ | ✗ |
| Change your own password | ✓ | ✓ | ✗ | ✓ | ✓ |
| View / edit own profile | ✓ | ✓ | ✓ | ✓ | ✓ |
| View sites list | ✓ | ✓ | ✓ | ✗ | ✗ |
Note
The Unbxd User role is an internal role and does not have a personal profile on your account, which is why "Change own password" and "View/edit own profile" are not available to it.
Role-Based actions
The actions available to users depend on their assigned role.
Owner
- Manage account settings.
- Create sites.
- Manage users and permissions.
- Configure SSO and 2FA.
- View and edit profile.
Super Admin
- Manage users and permissions.
- Invite and revoke users.
- Configure SSO and 2FA.
- Transfer account ownership.
- View and edit profile.
- Cannot create sites.
Unbxd User
- Manage users and permissions.
- Configure account settings where permitted.
- Transfer account ownership.
- View and edit profile.
- Admin Access assigned sites.
- Manage work within assigned sites.
- View and edit profile.
Member
- Access assigned sites.
- Perform assigned activities within sites.
- View and edit profile.
Single Sign-On (SSO)
Single Sign-On (SSO) allows users to authenticate using their organization's identity provider.
SSO Login Flow
- The user enters their registered email address.
- The system identifies the configured identity provider. The user is redirected to the organization's login page. The user authenticates using corporate credentials.
- Upon successful authentication, the user is redirected back to the application. Access is granted according to the permissions associated with the assigned role.
- SSO access and permissions. Authentication through SSO does not grant additional permissions. Users retain the permissions associated with their assigned role.
- Account-level features remain restricted to authorised roles only.
Refer to the SSO document here.
Updated about 9 hours ago