Team & roles (RBAC)

The Team area is where you manage who has access and what they can do. SecNxt uses role-based access control so people get exactly the permissions they need — no more.

Roles are surfaced as three friendly levels — Admin, Analyst and Viewer — backed by a more granular permission engine.

Permissions are checked on every sensitive action (inviting members, managing billing, reading the audit log, etc.).

Roles are assigned per workspace, so someone can be an Admin in one engagement and a Viewer in another.

1. 1Open Team from the sidebar.
2. 2Invite a person by email and choose their role.
3. 3Adjust roles later as responsibilities change.
4. 4Remove access when someone leaves the engagement.

• Giving clients read-only (Viewer) access to their own findings.
• Letting analysts work findings without granting billing control.

• Grant the least privilege that lets someone do their job.
• Admins can manage members and settings — reserve that role carefully.

What's the difference between the roles?

Admins manage the workspace and people; Analysts do security work; Viewers can see results but not change things.