Access Control
Supabase provides granular access control features that let you manage permissions across your organizations.
Within a Supabase organization, a member can have one of the following roles:
- Owner
- Administrator
- Developer
A default organization is created for a user when they first sign-in and
assigned the Owner role. If the user wants to invite others
to collaborate within the organization, they can visit the organization team
settings (https://app.supabase.com/org/<org-slug>/settings#team
) to send an
invite link to another user's email. The invite expires after 24 hours.
Invites sent from a SSO account can only be accepted by another SSO account coming from the same identity provider. This is a security measure that prevents accidental invites to accounts not managed by your company's enterprise systems.
Project level invites are not available at this time. A member of the organization will be able to access all projects under the organization. If you wish to restrict access to certain projects, please create another organization to manage this.
Manage team members#
You can invite your team members into your organizations to collaborate on projects.
Permissions across roles #
The table below shows the corresponding permissions for each available role you can assign a team member in the Dashboard.
Permissions | Owner | Administrator | Developer |
---|---|---|---|
Organization | |||
Change organization name | ✅ | ||
Delete organization | ✅ | ||
Members | |||
Add an Owner | ✅ | ||
Remove an Owner | ✅ | ||
Add an Administrator | ✅ | ✅ | |
Remove an Administrator | ✅ | ✅ | |
Add a Developer | ✅ | ✅ | |
Remove a Developer | ✅ | ✅ | |
Revoke an invite | ✅ | ✅ | |
Resend an invite | ✅ | ✅ | |
Accept an invite1 | ✅ | ✅ | ✅ |
Billing | |||
Read invoices | ✅ | ✅ | ✅ |
Read billing email | ✅ | ✅ | ✅ |
Change billing email | ✅ | ||
View subscription | ✅ | ✅ | ✅ |
Update subscription | ✅ | ✅ | |
Read billing address | ✅ | ✅ | ✅ |
Update billing address | ✅ | ✅ | |
Read tax codes | ✅ | ✅ | ✅ |
Update tax codes | ✅ | ✅ | |
Read payment methods | ✅ | ✅ | ✅ |
Update payment methods | ✅ | ✅ | |
Projects | |||
Create a project | ✅ | ✅ | |
Delete a project | ✅ | ✅ | |
Update a project | ✅ | ✅ | |
Pause a project | ✅ | ✅ | |
Resume a project | ✅ | ✅ | |
Restart a project | ✅ | ✅ | ✅ |
Footnotes#
-
If the invite was sent from a SSO account, it can only be accepted from a user signed in via the same identity provider. ↩