Skip to content

Roles & Teams

GradientHarbor provides organization-level roles and team-based grouping for managing access to your data and dashboards.

┌─────────────────────────────────────────────────────────┐
│                    Organization                          │
├─────────────────────────────────────────────────────────┤
│                                                          │
│   👤 Admin(s)          👥 Members                       │
│   ┌──────────┐         ┌──────────┐                     │
│   │ Full     │         │ Use the  │                     │
│   │ control  │         │ platform │                     │
│   └──────────┘         └──────────┘                     │
│                                                          │
│   ┌─── Teams ───────────────────────────────────┐       │
│   │                                              │       │
│   │  ┌───────────┐  ┌───────────┐  ┌──────────┐│       │
│   │  │Engineering│  │ Marketing │  │Leadership││       │
│   │  │ 👤👤👤   │  │ 👤👤     │  │ 👤👤👤  ││       │
│   │  └───────────┘  └───────────┘  └──────────┘│       │
│   │                                              │       │
│   │  Teams → Dashboard permissions               │       │
│   └──────────────────────────────────────────────┘       │
│                                                          │
└─────────────────────────────────────────────────────────┘

Organization Roles

Every member of an organization has one of two roles:

Admin

Admins have full control over the organization:

  • Manage data connectors (add, edit, remove)
  • Invite and remove members
  • Change member roles
  • Create and manage teams
  • Configure integrations (Slack, etc.)
  • Access billing and usage information
  • Manage enterprise security settings
  • All member capabilities

Member

Members can use the platform within their granted permissions:

  • Chat with the AI data agent
  • Create and edit dashboards (subject to permissions)
  • Run queries against connected databases
  • Browse the data catalog and ERD
  • Use semantic search
  • View dashboards shared with them

Teams

Teams let you group members for easier permission management. Instead of granting dashboard access to individual users, you can grant it to a team — and all team members inherit that access.

Creating a Team

  1. Go to Administration > Teams
  2. Click Create Team
  3. Enter a team name and optional description
  4. Add members to the team

Managing Team Membership

  • Admins can add or remove members from any team
  • A user can belong to multiple teams
  • Team membership is used for dashboard permissions

Use Cases

  • Engineering Team — Access to production database dashboards
  • Marketing Team — Access to campaign analytics dashboards
  • Leadership — Access to executive summary dashboards

TIP

Use teams to mirror your organizational structure. This makes it easy to grant and revoke access as people join or leave teams.

Multi-Tenancy

GradientHarbor is multi-tenant by design. Each organization is completely isolated:

  • Row-level security (RLS) policies enforce data isolation at the database level
  • Every API request sets the organization context (app.org_id)
  • Users cannot access data, dashboards, or settings from other organizations
  • A user can belong to multiple organizations and switch between them