Members & Roles

Understand team roles (Owner, Admin, Member) and their permissions.

Each team member has a role that determines what they can do within the team.

The team creator is automatically assigned the Owner role. Owners have full control over the team:

Admins have elevated permissions for day-to-day management:

Members can perform most vulnerability management tasks:

Action	Owner	Admin	Member
Manage products & releases	Yes	Yes	Yes
Upload & manage SBOMs	Yes	Yes	Yes
Triage vulnerabilities	Yes	Yes	Yes
Generate VEX documents	Yes	Yes	Yes
Submit VEX for approval	Yes	Yes	Yes
Approve/reject VEX	Yes	Yes	No
Publish VEX	Yes	Yes	No
Invite members	Yes	Yes	No
Remove members	Yes	No	No
Change member roles	Yes	No	No
Manage billing	Yes	No	No
Export audit logs	Yes	Yes	Yes

Only Owners can change member roles.