Users

To manage your team members you can go to Organization Settings > Users. From here you can manage all users across your organization.

Note: Only organization administrators can add, manage, and remove other users in the organization.

Users Overview

The Users overview page gives you a glance at all active users in your organization. You can see which users are organization administrators and which groups all users belong to.

You will also be able to see pending users. These are users that you have previously added to the organization but who have not yet accepted the invitation. Pending invitations are not revoked unless you remove a pending user.

Add User

To add a new user to your organization:

1. Go the Organization Settings > Users
2. Click on Add new user
3. Provide the email address of the user that should be invited.
4. Select if this user should be an organization administrator.
   1. Adding a user as an organization administrator will allow them to add, manage, and remove other users, groups, and assets from the organization.
5. Select the groups the user should be added to. Groups will grant the user access to specific programs and reports.
   1. By not adding a user to a group, they will be able to onboard onto the platform, but unable to access or take any action on the platform.
   2. Tip: If you would like to add a user to a group that doesn’t exist yet, we recommend that you create the group first and then add the user.
6. Click on Invite User at the bottom of the page to finish.

Users who have been added will appear under Pending Users until they have accepted the invitations.

While users are in pending state, they cannot be edited. If you would like to make changes to their invitation, you can remove the pending user and re-invite them following the same steps.

Edit User

You can edit a user from the Users overview page.

1. Find the user you want to edit.
2. Click the pencil on the right to go into edit mode
3. On the user profile page you will be able to edit these items:
   1. Add or remove admin permissions by checking the box under their profile details
   2. Add them to more groups by clicking on the plus sign in the table header. A sheet will open that will allow you to edit their group access. Click on update group access to update the user.
   3. Remove them from groups by clicking on the delete button in the table.

By editing a user’s group access, you are granting or revoking permissions and access to specific programs and reports.

Remove User

A user can be removed in two ways:

1. Clicking on the delete button in the user’s table row from the Users overview page.
2. Clicking on edit and removing them from the user profile page.
   1. Using either of these methods will create a modal that will indicate that this user will be removed from the Organization.
   2. Click on Remove user to complete this action.

Upon removal, the user will still be able to access the HackerOne platform, but will no longer be able to access any information for your organization.

Tip: This action is irreversible. If your intention is to revoke access to a specific program or inbox, you can edit the user’s access by adding and removing them from groups.