Automate Certificates documentation
Team and roles
A workspace has two roles. Everyone signs in with a Spot Suite account.
Roles
| Role | What it can do |
|---|---|
| Admin | Everything a member can do, plus invite and remove members, change roles, create and revoke API keys, register ACME accounts, set cloud credentials, run scans, manage webhooks and rules, and run bulk jobs. |
| Member | Work with certificates, targets, deployments and alerts, and read the audit log. |
Invite someone
- As an admin, open Members and choose Invite.
- Enter the e-mail address and choose Admin or Member. The default is Member.
- The person gets an invitation by e-mail and signs in with Spot Suite.
You cannot change your own role. Each plan allows a fixed number of members.
Sign-in and two-factor
Sign-in goes through Spot Suite, which supports passkeys and authenticator-app codes. Spot Suite also supports Microsoft Entra ID sign-in.
A removed member can keep access until their sign-in token expires, up to 15 minutes.
Audit
Invitations, role changes and removals are written to the audit log with the person who did them.