Skip to main content
Every person in your organization has one role. A role is a set of permissions. Enclave checks permissions, not role names, so a custom role works the same way as a default one.

​
Default roles

Every organization has three default roles. They’re marked System and can’t be edited or deleted.

​
Permissions by area

​
Research

Only the person who started a session can delete it. Research also hides the tools you don’t have permission to use. See What Research can do.

​
Findings

See Findings and triage.

​
Workflows and runs

A triggered run acts with organization-level access and keeps working after the person who set it up leaves. That’s why only owners and admins can change triggers, and why custom roles can never get this permission. Editing a workflow that has a trigger turned on also requires it. See Workflows, Triggers, and Runs.

​
Agents

See Agents.

​
Coverage and repositories

See Coverage and PR and dependency analysis.

​
Organization settings

Everyone can manage their own personal secrets.

​
Manage members

Go to Settings → Members.
  • Invite someone: click Invite member. Enter their First name, Last name, and Email address, choose a Role, and click Send Invite.
  • Change a role: click the member’s current role and choose another. You can also change the role a pending invitation will grant.
  • Manage invitations: click Resend or Revoke on a pending invitation.
  • Remove a member: click Remove.
These rules apply:
  • You can’t change your own role.
  • Owners can assign any role. Admins can assign any role except Owner.
  • Admins can’t change the owner’s role or remove the owner.

​
Transfer ownership

An organization has one owner. To hand over ownership, the owner changes another member’s role to Owner and clicks Transfer ownership to confirm. The new owner takes over, and your role becomes Admin.

​
Custom roles

Create a custom role when the default roles don’t fit, for example a reviewer who triages findings but doesn’t manage the organization. Only owners and admins can see and manage roles.
1

Open Roles

Go to Settings → Roles and click Create role.
2

Name the role

Enter a Name, for example Security reviewer.
3

Choose permissions

Under Permissions, select what the role can do.
4

Save

Click Create role. Assign it to people from Settings → Members, like any other role.
A custom role has only the permissions you select. It doesn’t inherit anything from Member.

​
Permissions you can grant

A custom role can’t manage members, roles, billing, integrations, the audit log, AI provider keys, or organization secrets. It also can’t change workflow triggers. Use the Admin or Owner role for those.

​
Edit or delete a custom role

On the Roles page, click Edit or Delete next to the role. Deleting a role moves everyone who has it to Member. Pending invitations for that role need to be sent again. You can’t undo a delete.