Roles and permissions
A team has two roles: Administrator and Member. An admin chooses the role when inviting someone and can change it later on Team Settings → My Team. To invite people, see Bring in your team.
The portal and the app differ
Section titled “The portal and the app differ”The portal and the app do not enforce the same rules:
- Uptime checks: in the app, any member can add or remove a check. In the portal, adding, editing and removing checks needs the Administrator role.
- Muting alerts: any member can mute and unmute an alert in the app.
- Connecting a project: needs an admin in both. In the app a member sees “Only team admins can connect a project — ask an admin, or add it on the web portal.” A member can still add a project to their own device only.
- The Claude connector: any member can authorize it for their team.
Who can do what
Section titled “Who can do what”“Admin” means the Administrator role. “Any member” includes admins. A dash means it cannot be done there.
Seeing the team
| Action | Portal | App |
|---|---|---|
| See the team dashboard and the lists of projects, monitored servers and uptime checks | Any member | Any member |
| See resources, alerts, metrics, logs, jobs and costs | Summary cards on the team dashboard, any member | Any member |
| Receive push alerts (Pro and Team) | — | Any member |
| Be the email digest recipient | Any member with a verified address (chosen by an admin) | — |
Projects and servers
| Action | Portal | App |
|---|---|---|
| Connect a Hetzner project to the team | Admin | Admin |
| Add a project to this device only | — | Anyone, no account needed |
| Replace a project’s API token, delete a project | Admin | — |
| Add or remove a monitored server; issue, rotate or revoke agent tokens and fleet enrollment tokens | Admin | — |
| Set a price, edit labels of a dedicated server or check target | Admin | — |
Uptime checks and alerts
| Action | Portal | App |
|---|---|---|
| Add an uptime check | Admin | Any member |
| Remove an uptime check | Admin | Any member |
| Edit a check, anchor it to a resource | Admin | — |
| Mute or unmute an alert | — | Any member |
| Alerts page: email digest, alert targets, Issue a new topic | Admin | — |
Team-wide settings
| Action | Portal | App |
|---|---|---|
| Log Collection (SSH and sudo log lines) | Admin | — |
| Agent Hand-off Notes | Admin | — |
| Subscription: buy, change or cancel a plan, billing | Admin (members see that they have no access) | — |
| Rename the team | Admin | — |
| Delete the team (cancels its subscription at once) | Admin | — |
Members
| Action | Portal | App |
|---|---|---|
| See the members and pending invitations | Any member | — |
| Invite, resend or cancel an invitation | Admin | — |
| Change a member’s role | Admin, not for themselves | — |
| Remove a member | Admin | — |
| Leave the team | Any member, except the last admin | — |
| Switch between your teams | Any member | Any member |
Elsewhere
| Action | Who |
|---|---|
| Authorize the Claude connector for a team (Pro and Team) | Any member of that team |
| Your own profile: language, time zone, password, two-factor authentication, API keys | Every user, for themselves |
| Free account | Pro | Team | |
|---|---|---|---|
| Seats | 1 | 1 | 5 |
- A seat is a member or a pending invitation. An invitation takes its seat until it is accepted or cancelled.
- Free and Pro have one seat, so only Team can invite anyone. More seats on Team: write to support@mitjamartini.com.
- The seat limit is checked when an invitation is sent and again when it is accepted.
- An invitee accepts with the invited email address, which must be verified first. An account created from the invitation link counts as verified. An address can have one pending invitation per team.
Teams per person
Section titled “Teams per person”- You can administer one free team. Once it is on a paid plan, you can create more.
- There is no limit on teams you are invited to.
The last admin
Section titled “The last admin”- The only administrator of a team cannot leave it or be removed. The portal says: “You cannot remove the only administrator from a team. Make another team member an administrator and try again.”
- Nobody can change their own role, so a second admin is needed to hand over the role.
- Deleting a team deletes its data and cancels its subscription at once.