Enterprise Members and Roles
An enterprise is the top level of the member permission system. Enterprise members can descend into lower-level organizations and projects, enabling unified permission management across teams.
I. Enterprise Members
Member List
Go to Enterprise Settings → "Enterprise Members" to view all members of the enterprise. Enterprise members have only one source tab, which is members directly added to the enterprise.
Invite Members
Enterprise members can be invited through the following methods:
Method One: Invite by Username/Email Click "Invite Member," enter the username or email of the invited user, select a role, and send the invitation.
Method Two: Invite Link Click "Invite Link," set the default role and expiration time, then generate the link. Invited users can join the enterprise by clicking the link.
Role Changes and Removal of Members
In the member list, click the member's role name to open a dropdown menu and select a new role to change it. Click "Remove" to remove the member from the enterprise.
II. Enterprise Roles
System Roles
The enterprise has 6 system roles, arranged in order of increasing permissions:
| Role | Description |
|---|---|
| Administrator | The enterprise manager, with full permissions |
| Maintainer | The daily maintainer of the enterprise, can manage projects and members |
| Developer | Can participate in enterprise project development and discussions |
| Contributor | Can report issues, provide feedback, and participate in discussions |
| Viewer | Can browse public projects of the enterprise and participate in discussions |
Custom Roles
Enterprise administrators can create custom roles based on actual needs, flexibly configuring permission points. Each enterprise can create up to 50 custom roles at most.
Custom roles are detailed in Custom Role Configuration.
III. Member Descending
What is Descending
Enterprise members can automatically gain access rights to lower-level organizations and projects. This process is called member descending.
How to Control Descending
When editing an enterprise role, two dimensions of permission points need to be configured:
- Permissions of the enterprise itself — determines what members can do within the enterprise
- Permissions of organizations/projects — determines what members can do after descending into organizations and projects
When an enterprise role enables the "Permission Descending" attribute, the members of that role will automatically appear in:
- the "Enterprise Members" tab of their affiliated organization
- the "Enterprise Members" tab of their affiliated project
Display After Descending
Enterprise members who have descended into an organization are displayed in the "Enterprise Members" tab of the organization members list, and are only viewable, not editable or removable.
Enterprise members who have descended into a project are displayed in the "Enterprise Members" tab of the project members list, and are only viewable, not editable or removable.
Next Reading: Organization Members and Roles