# Inviting your team and assigning roles

- Source: https://support.icompaas.com/support/solutions/articles/a_gen_ss_62000037934_6d09c9b282-inviting-your-team-and-assigning-roles
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Getting Started With iCompaas](https://support.icompaas.com/support/solutions/62000037934) › [Personnel Onboarding](https://support.icompaas.com/support/solutions/folders/personnel-onboarding)
- Last updated: 2026-07-15
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

User management · 5 minute read

### Role model

iCompaas uses four built-in roles. Pick the smallest scope that lets the person do their job:

-   **Owner** — full control, including billing and removing other Owners. Keep this list small.
-   **Admin** — manage frameworks, policies, evidence, integrations. No billing.
-   **Editor** — implement controls, upload evidence, run scans. No deletes.
-   **Auditor** — read-only, plus export of audit-ready evidence packs. Ideal for external auditors and your customers' security reviewers.

### Single sign-on (SSO)

Enterprise plans support SAML 2.0 (Okta, Azure AD/Entra ID, Google Workspace, JumpCloud). When SSO is enabled we can also auto-provision via SCIM so leavers lose access on day one.

### Invitations

Settings → _Users_ → _Invite_. Each invitation is single-use and expires after 7 days. We never email passwords; invitees set their own at first sign-in.

### Audit trail

Every privilege change is recorded under Settings → _Audit log_. We retain admin actions for the lifetime of the account and ship them to your SIEM if you've connected one.