Members & invitations
Invite people to your organization and manage their roles.
Members are the users who belong to your organization. Invite people by email; once they accept, they join with the role you assign.
Manage members from Organization → Members in the dashboard, or the CLI:
relay members list
relay members invite --email <email> --role <role>
relay members set-role --email <email> --role <role>
relay members remove <email>--role on invite takes admin, member, viewer or the slug of a custom
role. To give the invitee a role in specific workspaces at the same time, repeat
--workspace-role <workspace>:<role>:
relay members invite --email dana@example.com --role member \
--workspace-role production:viewer --workspace-role staging:memberA member's actual capabilities come from their role bindings, not from membership itself — membership records who belongs, roles record what they can do.
When the invitee accepts, workspace access depends on whether you passed
--workspace-role:
- With
--workspace-role: the member is added to exactly the workspaces you listed, with the role given for each. They are not added to the default workspace unless you list it. - Without
--workspace-role: anadminis added to every workspace in the organization as admin. Any other role (member,viewer, or a custom role) is added to the organization's default workspace only, with that same role.
Grant additional workspace roles later to widen or restrict access per workspace.
Group members with teams to grant a role to many people at once.
Roles & permissions (RBAC)
Relay's authorization model — permissions, system and custom roles, bindings, teams, the permission matrix, and how access is resolved across organizations and workspaces.
SSO (OIDC)
Enterprise single sign-on with OpenID Connect — how it works, provider setup for Okta and Microsoft Entra ID, and how identities are provisioned.