Zaysa

Team & account

Invite your team

Invite people to your organization, choose their role, and change or remove access later.

About 5 minutes

Everyone in your organization sees the same clouds, clusters and reports. Each person has a role that decides what they may change. You add people by email from IAM in the sidebar, and choose what they get before they join.

Before you start

  • You are the organization’s Owner or an Admin.
  • A free seat on your plan. Free is for one person, Pro includes three people, and Business has no limit. An invitation that is not yet accepted holds a seat.

Add people

  1. Who joins

    Open IAM in the sidebar and click Add people. Type or paste their email addresses; press Enter after each one, or paste a whole list. Pick the Starting role and click Next.

  2. What they get

    Tick the Teams they join and any Roles and policies they get directly. Under Cloud accounts they see, keep All accounts or choose Only these. To start from someone who already has the right access, pick them inSame access as a teammate and change anything you like.

    You can only give what you have yourself. If you may not manage roles and policies, this step shows only the cloud accounts, and your invitations use the starting role.

  3. Check and send

    The review shows everything they will get. Click Send. Zaysa emails each person a link to join and lists the result; if an email could not be sent, the line says email not sent and Copy link gives you the link to send yourself.

  4. They accept

    They open the link and sign in, or create an account, with the address you invited. An invitation opened while signed in with another address is refused. The moment they accept, they get everything you chose.

    Until then they wait under Pending invitations, with what they will get.

Checked again when they accept

Zaysa checks your rights when you send the invitation and again when it is accepted. If you lost a right in between, the person joins with the starting role and the cloud accounts you chose, and the rest is left out and recorded.

Invitations last 14 days

The list shows how long each one has left. To cancel one, or to send a new link because the old one is lost, revoke it in the list and invite the address again.

Roles

RoleIn short
OwnerFinal say. Exactly one per organization. Billing, transferring ownership and deleting the organization.
AdminRuns the team and the infrastructure: invites people, changes roles, edits organization settings, and may clean up waste, run and destroy deployments. Everything except the Owner-only actions.
MemberLooks, connects clouds and clusters, runs cost scans, plans deployments, manages budgets and cost settings, and creates API keys. Cannot clean up, run or destroy anything, or manage people.
ViewerLooks only, and can request access through Beam. Changes nothing.

Member is not read-only

A Member can connect cloud accounts and change cost settings. For someone who should only look, such as an auditor, choose Viewer. To let one Member run deployments, or to take something away, use Edit access (see Roles, policies and teams).

For the full list, click the ? next to Members (1). The table is built from the same rules Zaysa checks on every action.

Change a role or remove someone

Click a person in the member list (2). In the panel that opens:

  • (1) Role changes their role at once.
  • (2) Edit access is everything else about this person in one window: which cloud accounts they see, extra roles and policies, and exceptions for this person only, for example a Member who may also run deployments on one account. See Roles, policies and teams.
  • (3) Remove from your organization takes away their access. Their own Zaysa account stays.

The Owner cannot be demoted here. To hand the organization to someone else, use Transfer ownership (see below).

See who did what

The Activity list on the People tab shows the last 25 changes to your organization and its members, and who made each one: joins, role changes, removals and settings. Click CSV to download it.

Organization settings

Click Org settings at the top of the IAM page.

SettingWhat it doesWho
Organization nameThe name shown across the dashboard and in invitations.Owner, Admin
Billing emailWhere invoices and payment notices go.Owner, Admin
Your notificationsWhich organization events email you: new members, role changes, invitations sent, settings changed.Each person for themselves
Transfer ownershipHands the organization to another member. You become an Admin.Owner
Delete this organizationEveryone loses access to it at once and invitations not yet accepted stop working. Not possible while a paid plan is running (cancel it in Billing first) or for your only organization.Owner

Transferring ownership and deleting the organization need two-factor sign-in turned on and a sign-in within the last 30 minutes. Otherwise Zaysa asks you to sign in again first.

If something goes wrong

  • “This invitation was sent to a different email address”: sign out and open the link again with the invited address, or ask for an invitation to the address you use.
  • The invite button says you are out of seats: revoke unused invitations or move to a plan with more seats.
  • “This invitation was already used”: the link was accepted before. If that person was removed since, invite them again.
  • “Invitation not found”: the link is wrong, or the organization was deleted.

Next steps

Roles, policies and teamsDecide exactly what each person may do: ready-made roles, your own policies, teams, exceptions for one person, and a simulator to check.Give kubectl accessGive a teammate time-limited kubectl access to a cluster, in the browser or from their own computer.
Invite your team | Zaysa docs