Roles & Teams
GradientHarbor provides organization-level roles and team-based grouping for managing access to your data and dashboards.
┌─────────────────────────────────────────────────────────┐
│ Organization │
├─────────────────────────────────────────────────────────┤
│ │
│ 👤 Admin(s) 👥 Members │
│ ┌──────────┐ ┌──────────┐ │
│ │ Full │ │ Use the │ │
│ │ control │ │ platform │ │
│ └──────────┘ └──────────┘ │
│ │
│ ┌─── Teams ───────────────────────────────────┐ │
│ │ │ │
│ │ ┌───────────┐ ┌───────────┐ ┌──────────┐│ │
│ │ │Engineering│ │ Marketing │ │Leadership││ │
│ │ │ 👤👤👤 │ │ 👤👤 │ │ 👤👤👤 ││ │
│ │ └───────────┘ └───────────┘ └──────────┘│ │
│ │ │ │
│ │ Teams → Dashboard permissions │ │
│ └──────────────────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────┘Organization Roles
Every member of an organization has one of two roles:
Admin
Admins have full control over the organization:
- Manage data connectors (add, edit, remove)
- Invite and remove members
- Change member roles
- Create and manage teams
- Configure integrations (Slack, etc.)
- Access billing and usage information
- Manage enterprise security settings
- All member capabilities
Member
Members can use the platform within their granted permissions:
- Chat with the AI data agent
- Create and edit dashboards (subject to permissions)
- Run queries against connected databases
- Browse the data catalog and ERD
- Use semantic search
- View dashboards shared with them
Teams
Teams let you group members for easier permission management. Instead of granting dashboard access to individual users, you can grant it to a team — and all team members inherit that access.
Creating a Team
- Go to Administration > Teams
- Click Create Team
- Enter a team name and optional description
- Add members to the team
Managing Team Membership
- Admins can add or remove members from any team
- A user can belong to multiple teams
- Team membership is used for dashboard permissions
Use Cases
- Engineering Team — Access to production database dashboards
- Marketing Team — Access to campaign analytics dashboards
- Leadership — Access to executive summary dashboards
TIP
Use teams to mirror your organizational structure. This makes it easy to grant and revoke access as people join or leave teams.
Multi-Tenancy
GradientHarbor is multi-tenant by design. Each organization is completely isolated:
- Row-level security (RLS) policies enforce data isolation at the database level
- Every API request sets the organization context (
app.org_id) - Users cannot access data, dashboards, or settings from other organizations
- A user can belong to multiple organizations and switch between them