> ## Documentation Index
> Fetch the complete documentation index at: https://docs.glood.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Organization and team

> Organization settings, inviting people, roles and permissions, and the sign-in policy

Everything here lives under **Settings** in the left rail. Each tab is shown
only to people whose role can read it; a tab you can see but not change says
**Read only**.

## Organization

**Settings → Organization** holds the organization's name, logo, domain and
**Address**, and its country, city, currency and time zone. These apply to the
organization and every store in it. Save with the save bar at the bottom of the
screen.

The address does not change when you rename the organization, so existing links
keep working.

## Team

**Settings → Team** lists the members and the invitations still waiting for an
answer.

### Invite someone

**1. Invite people**

Choose **Invite people**.

**2. Email and role**

Enter their **Email** and pick a **Role**. They do not need a Glood account
yet.

**3. Send invitation**

We email them a link. It expires after 7 days.

You cannot invite someone as **Owner**. Invite them with another role, then
change their role to Owner once they have joined.

Each pending invitation shows its role and expiry, with **Resend invitation**
and **Revoke invitation**. Revoking stops the link working; you can invite them
again later.

### Change a role or remove a member

Pick a new role from the member's **Role** list. **Remove from organization**,
in the member's actions, takes their access away at once; you can invite them
back later. Your own row offers **Leave organization** instead. An organization
always keeps at least one owner.

## Roles

**Settings → Roles** lists the roles and what each may do. Every organization
starts with four built-in roles:

| Role | In short |
| - | - |
| **Owner** | Everything, including deleting the organization |
| **Admin** | Everything except deleting the organization, managing billing, and querying Shopify through a connected assistant |
| **Member** | Works with stores, reports, agents and skills. Cannot change organization settings, manage the team or roles, set an agent to Act, change where alerts go, or snooze and archive insights |
| **Viewer** | Reads everything, and can download reports. Changes nothing |

Built-in roles cannot be edited. To change what one can do, choose **Duplicate
to edit**, or **Create custom role**:

**1. Name it**

A **Role name**, and **Based on**, the role whose permissions it starts from.

**2. Choose what it can do**

Tick permissions by area: Organization, Team, Roles, Stores, Billing,
Agents, Alerts, Skills and Insights. **Filter permissions** finds one by
name. A permission marked **needs** another only works with that one ticked
too.

You cannot grant a permission you do not hold yourself. **Delete role** works
only once nobody holds the role; move its members to another role first.

### Permissions that matter most

| Permission | Lets someone |
| - | - |
| `agent:write` | Create, edit, deploy, pause and archive agents, and run them now |
| `agent:mode` | Put a deployment in **Act**, where it changes things in Shopify |
| `skill:write` | Create and edit skills |
| `skill:attach` | Choose which skills an agent reads |
| `insight:manage` | Snooze and archive insights, and choose which checks run |
| `alert:manage` | Change where alerts go |
| `store:write` | Connect stores and change their settings and monitoring |

## Security

**Settings → Security → Require 2FA for everyone in the org.** Members without
two-factor authentication are locked out of this organization until they enrol.
It applies to you too: anyone without it is asked to set it up the next time
they open the organization.

## Danger zone

Owners only. **Delete organization** removes the organization, its members and
its invitations, and cannot be undone. Type the organization's name to confirm.

## Your account

**Account settings**, your avatar at the bottom of the left rail, is personal to you and the
same in every organization:

* **Profile**: your name and photo, and your email's verification.
* **Security**: reset your password (it signs you out everywhere), two-factor
  authentication and backup codes, the devices you are signed in on, and
  **Connected assistants**: the AI assistants connected to your account and the
  organizations each may reach. See [Access and privacy](https://docs.glood.ai/platform/access-and-privacy.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.