Managing Members

Effective member management is essential for maintaining security and enabling your team to work productively. This guide covers everything you need to know about roles, permissions, and day-to-day member administration.

Understanding Roles

Choose the right role for each team member to balance security with productivity. Here's what each role is designed for:

Owner

Primary account holder

Unrestricted access to all settings including billing, security, and ownership transfer. Keep this limited to 1-2 key leaders.

Admin

Team leads & IT managers

Can manage users and configure providers. Ideal for trusted managers who need operational control without billing access.

Member

Developers & contributors

Can use Cline with shared resources but cannot change settings. The safest default for most team members.

Permissions Matrix

Understand exactly what each role can do with this comprehensive permissions breakdown:

Permission	Member	Admin	Owner
General Usage
Use Cline	✅	✅	✅
Access Shared API Providers	✅	✅	✅
Member Management
View Members	❌	✅	✅
Invite New Members	❌	✅	✅
Edit Member Roles	❌	✅	✅
Remove Members	❌	✅	✅
Remove Admins	❌	❌	✅
Configuration
Configure API Providers	❌	✅	✅
Manage Security Settings	❌	❌	✅
Billing & Ownership
View Billing Information	❌	❌	✅
Manage Subscription	❌	❌	✅
Transfer Ownership	❌	❌	✅

Member Management Tasks

Adding Members

Inviting New Team Members

1. Navigate to Members

   • Go to your organization dashboard at app.cline.bot
   • Click on "Members" in the sidebar

2. Send Invitation

   • Click "Invite Member"
   • Enter the user's email address (must be from your verified domain)
   • Select the appropriate role (Member, Admin, or Owner)
   • Click "Send Invite"

3. Invitation Status

   • Invited users will receive an email with a join link
   • Pending invitations show in your member list with "Pending" status
   • Each pending invitation holds one seat from your license

Editing Roles

Changing Member Permissions

1. Locate the Member

   • Navigate to the Members page
   • Find the user you want to modify

2. Change Role

   • Click the dropdown next to their current role
   • Select the new role from the menu
   • Confirm the change

3. Effective Immediately

   • Role changes take effect instantly
   • The user may need to sign out and back in to see updated permissions

Removing Members

Offboarding Team Members

1. Access Member List

   • Navigate to your organization's Members page
   • Locate the user to remove

2. Remove User

   • Click the menu icon (⋮) next to their name
   • Select "Remove from Organization"
   • Confirm the removal

3. Immediate Effects

   • User loses access to the organization immediately
   • Their seat is freed and can be assigned to someone else
   • Audit logs are preserved for compliance

Revoking Invites

Canceling Pending Invitations

If an invited user hasn't accepted yet, you can revoke the invitation:

1. Find the pending invitation in your Members list
2. Click "Revoke Invitation"
3. The seat is immediately freed for another user

This is useful when:

• The wrong email was used
• The user no longer needs access
• You need to reassign the seat urgently

Identity & Access Requirements

For users to successfully join your organization, two conditions must be met:

Verified Identity Provider

Your organization must use a verified Identity Provider (IDP) such as:

• Microsoft Entra ID (Azure AD)
• Okta
• Google Workspace
• AWS IAM Identity Center

Users must authenticate through your IDP to access the organization.

Domain Verification

Your organization must have a verified domain. You'll need to verify ownership of your domain through your domain provider (e.g., Google, Microsoft, Cloudflare).

Only users with email addresses from verified domains can join.

Seat Management

Understanding how seats work helps you manage your license effectively:

How Seats Are Calculated

• Each user (Owner, Admin, or Member) consumes one seat
• Pending invitations also hold one seat
• Removing a member or revoking an invite immediately frees the seat
• Your license determines the maximum number of seats available

When Seats Are Used

A seat is consumed when:

• You send an invitation (marked as "pending")
• An invited user accepts and joins
• An existing user is granted access through SSO

Freeing Up Seats

To free a seat:

• Remove an active member from the organization
• Revoke a pending invitation
• Wait for a pending invite to expire (if configured)

Upgrading Your License

Need more seats?

• Enterprise Plan: Includes unlimited seats with no per-user restrictions. Contact your account manager or visit app.cline.bot/settings/billing to upgrade.

Security Best Practices

Follow these guidelines to maintain a secure organization:

Principle of Least Privilege

Always assign the minimum role necessary. Most users should be Members. Only grant Admin or Owner privileges when required for job duties.

Limit Owner Roles

Keep Owners to 1-2 key individuals who manage billing and security. This centralization prevents accidental or malicious changes to critical settings.

Regular Audits

Review your member list quarterly. Remove inactive users promptly and verify that Admin/Owner roles are still appropriate for each user.

Offboarding Process

Create a standard offboarding checklist: remove from Cline, revoke IDP access, document in audit log, and reassign any critical responsibilities.

Advanced Scenarios

Transferring Ownership

Only the current Owner can transfer ownership:

1. Navigate to Organization Settings
2. Go to the "Ownership" section
3. Select the new Owner from the member list
4. Confirm the transfer with your authentication
5. The new Owner receives immediate control

Important: This action cannot be undone by the previous Owner. The new Owner must initiate a reverse transfer if needed.

Managing Multiple Admins

When you have multiple Admins:

• Document each Admin's area of responsibility
• Use audit logs to track configuration changes
• Consider creating rotation schedules for large teams
• Establish escalation paths for Owner-level decisions

Temporary Access

For contractors or temporary staff:

• Create them as Members with expiration calendar reminders
• Document their access period in your internal systems
• Set calendar reminders to remove them when the contract ends
• Consider using time-limited IDP accounts if your IDP supports it

Troubleshooting

User Can't Accept Invitation

Common causes:

• Email domain doesn't match verified domain
• User's IDP access hasn't been granted yet
• Invitation link expired

Solution: Verify domain verification is complete and resend the invitation.

Can't Remove an Admin

Cause: Only Owners can remove Admins.

Solution: Ask an Owner to perform the removal, or if you need to remove your organization's sole Owner, contact [email protected].

Out of Seats

When you've reached your license limit:

• Remove inactive members to free seats
• Revoke pending invitations that are no longer needed
• Upgrade your license to add more seats

Next Steps

Now that you understand member management, proceed with configuring your organization:

• Configure Providers：Set up API providers for your team to use

• Monitor Usage：Track team activity and resource consumption