Features
Team Collaboration - rizset Docs
Learn how to manage teams, roles, and permissions in Virex for seamless collaboration across your organization.
Virex is built for teams. Whether youβre a small startup or a large enterprise, our collaboration features help your team work together efficiently while maintaining security and control.
Team Structure
Virex uses a hierarchical structure for organizing teams:
Organization
βββ Team A
β βββ Project 1
β βββ Project 2
βββ Team B
βββ Project 3
βββ Project 4
- Organization β Your company or top-level account
- Teams β Groups of people working together
- Projects β Individual applications or services
Inviting Team Members
Invite members via the dashboard or CLI:
Dashboard
- Go to Settings β Team
- Click Invite Member
- Enter their email address
- Select a role
- Click Send Invite
CLI
virex team invite user@example.com --role developer
Invitees receive an email with a link to join your organization.
Roles and Permissions
Virex provides predefined roles with different permission levels:
Owner
Full control over the organization:
- Manage billing and subscription
- Delete the organization
- All Admin permissions
Admin
Manage team and project settings:
- Invite and remove members
- Create and delete projects
- Manage integrations
- All Developer permissions
Developer
Day-to-day development access:
- Create deployments
- View logs and analytics
- Manage environment variables
- Trigger rollbacks
- All Viewer permissions
Viewer
Read-only access:
- View deployments and logs
- View project settings
- Access preview deployments
Permission Matrix
| Action | Owner | Admin | Developer | Viewer |
|---|---|---|---|---|
| View projects | β | β | β | β |
| View deployments | β | β | β | β |
| View logs | β | β | β | β |
| Create deployments | β | β | β | β |
| Rollback | β | β | β | β |
| Manage env vars | β | β | β | β |
| Manage domains | β | β | β | β |
| Create projects | β | β | β | β |
| Delete projects | β | β | β | β |
| Invite members | β | β | β | β |
| Manage billing | β | β | β | β |
Custom Roles
Enterprise plans can create custom roles:
// Custom role definition
{
name: "QA Engineer",
permissions: [
"deployments:read",
"deployments:create:preview",
"logs:read",
"analytics:read",
// Cannot deploy to production
]
}
Contact sales to enable custom roles for your organization.
Project-Level Permissions
Override organization roles at the project level:
# Give a viewer deploy access to a specific project
virex project add-member user@example.com --role developer --project my-app
This is useful for:
- Contractors who need access to specific projects
- Cross-team collaboration on shared services
- Temporary elevated access
Deployment Comments
Leave comments on deployments to communicate with your team:
virex comment "Tested on staging, LGTM" --deployment deployment-abc123
Comments appear in:
- The Virex dashboard
- GitHub PR comments (if integrated)
- Slack notifications (if configured)
Mentioning Team Members
Mention team members in comments:
virex comment "@sarah can you review the API changes?" --deployment deployment-abc123
Mentioned members receive a notification.
Audit Logs
Track all actions taken in your organization:
virex audit-log --last 7d
TIMESTAMP USER ACTION RESOURCE
2024-01-15 10:30 john@example.com deployment.create my-app
2024-01-15 10:25 sarah@example.com env.update my-app
2024-01-15 09:00 admin@example.com member.invite org
Filtering Audit Logs
# Filter by user
virex audit-log --user john@example.com
# Filter by action type
virex audit-log --action deployment.*
# Filter by project
virex audit-log --project my-app
# Export to JSON
virex audit-log --format json > audit.json
Audit logs are retained for:
- Pro plans: 90 days
- Enterprise plans: 1 year (configurable)
Notifications
Configure how your team receives notifications:
Per-User Settings
Each team member can configure their preferences:
- Email β Deployment success/failure, mentions
- Slack DM β Real-time notifications
- Browser β Push notifications
Team Channels
Set up shared notification channels:
// virex.config.js
export default {
notifications: {
slack: {
channel: '#deployments',
events: ['deployment.success', 'deployment.failure', 'rollback'],
},
discord: {
webhook: process.env.DISCORD_WEBHOOK,
events: ['deployment.failure'],
},
},
};
Access Tokens
Create tokens for CI/CD and automation:
# Create a deploy token
virex tokens create --name "GitHub Actions" --scope deploy
# Create a read-only token
virex tokens create --name "Monitoring" --scope read
Token Scopes
| Scope | Permissions |
|---|---|
deploy | Create deployments, read logs |
read | Read-only access to all resources |
admin | Full API access |
Token Best Practices
- Use descriptive names β Know what each token is for
- Limit scope β Only grant necessary permissions
- Rotate regularly β Regenerate tokens periodically
- Revoke unused tokens β Clean up tokens that are no longer needed
SSO Integration
Enterprise plans support Single Sign-On:
- SAML 2.0
- OpenID Connect
- Okta, Azure AD, Google Workspace
See SSO documentation for setup instructions.
Best Practices
- Use the principle of least privilege β Give users only the access they need
- Set up team channels β Keep everyone informed about deployments
- Review audit logs regularly β Catch unauthorized access early
- Use project-level permissions β Donβt give org-wide access unnecessarily
- Rotate access tokens β Especially after team members leave
Troubleshooting
Member canβt access project
Check their role at both organization and project level:
virex team list
virex project members my-app
Notifications not working
Verify the integration is configured:
virex integrations list
Audit log missing events
Ensure you have the appropriate plan. Some events are only logged on Enterprise plans.