Skip to main content
Effective member management is essential for maintaining security and enabling your team to work productively. This guide covers everything you need to know about roles, permissions, and day-to-day member administration.

​
Understanding Roles

Choose the right role for each team member to balance security with productivity. Here’s what each role is designed for:

Owner

Primary account holderUnrestricted access to all settings including billing, security, and ownership transfer. Keep this limited to 1-2 key leaders.

Admin

Team leads & IT managersCan manage users and configure providers. Ideal for trusted managers who need operational control without billing access.

Member

Developers & contributorsCan use Cline with shared resources but cannot change settings. The safest default for most team members.

​
Permissions Matrix

Understand exactly what each role can do with this comprehensive permissions breakdown:
PermissionMemberAdminOwner
General Usage
Use Cline✅✅✅
Access Shared API Providers✅✅✅
Member Management
View Members❌✅✅
Invite New Members❌✅✅
Edit Member Roles❌✅✅
Remove Members❌✅✅
Remove Admins❌❌✅
Configuration
Configure API Providers❌✅✅
Manage Security Settings❌❌✅
Billing & Ownership
View Billing Information❌❌✅
Manage Subscription❌❌✅
Transfer Ownership❌❌✅
Quick Reference: Most users should be Members. Grant Admin only to those managing users or configs. Reserve Owner for 1-2 account leaders.

​
Member Management Tasks

​
Inviting New Team Members

  1. Navigate to Members
    • Go to your organization dashboard at app.cline.bot
    • Click on “Members” in the sidebar
  2. Send Invitation
    • Click “Invite Member”
    • Enter the user’s email address (must be from your verified domain)
    • Select the appropriate role (Member, Admin, or Owner)
    • Click “Send Invite”
  3. Invitation Status
    • Invited users will receive an email with a join link
    • Pending invitations show in your member list with “Pending” status
    • Each pending invitation holds one seat from your license
Bulk Invitations: Need to add multiple users? Contact [email protected] for assistance with bulk invite CSV imports.

​
Identity & Access Requirements

For users to successfully join your organization, two conditions must be met:
1

Verified Identity Provider

Your organization must use a verified Identity Provider (IDP) such as:
  • Microsoft Entra ID (Azure AD)
  • Okta
  • Google Workspace
  • AWS IAM Identity Center
Users must authenticate through your IDP to access the organization.
2

Domain Verification

Your organization must have a verified domain. You’ll need to verify ownership of your domain through your domain provider (e.g., Google, Microsoft, Cloudflare).Only users with email addresses from verified domains can join.
These requirements ensure that only authenticated users from your company can access your Cline organization, preventing unauthorized access.

​
Seat Management

Understanding how seats work helps you manage your license effectively:
  • Each user (Owner, Admin, or Member) consumes one seat
  • Pending invitations also hold one seat
  • Removing a member or revoking an invite immediately frees the seat
  • Your license determines the maximum number of seats available
A seat is consumed when:
  • You send an invitation (marked as “pending”)
  • An invited user accepts and joins
  • An existing user is granted access through SSO
To free a seat:
  • Remove an active member from the organization
  • Revoke a pending invitation
  • Wait for a pending invite to expire (if configured)
Need more seats?
  • Teams Plan: Contact your account manager or visit app.cline.bot/settings/billing to upgrade your license.
  • Enterprise Plan: Includes unlimited seats with no per-user restrictions.

​
Security Best Practices

Follow these guidelines to maintain a secure organization:

Principle of Least Privilege

Always assign the minimum role necessary. Most users should be Members. Only grant Admin or Owner privileges when required for job duties.

Limit Owner Roles

Keep Owners to 1-2 key individuals who manage billing and security. This centralization prevents accidental or malicious changes to critical settings.

Regular Audits

Review your member list quarterly. Remove inactive users promptly and verify that Admin/Owner roles are still appropriate for each user.

Offboarding Process

Create a standard offboarding checklist: remove from Cline, revoke IDP access, document in audit log, and reassign any critical responsibilities.
Owner Accountability: Since Owners control billing and can transfer ownership, choose these individuals carefully and document the selection in your organization’s security policies.

​
Advanced Scenarios

Only the current Owner can transfer ownership:
  1. Navigate to Organization Settings
  2. Go to the “Ownership” section
  3. Select the new Owner from the member list
  4. Confirm the transfer with your authentication
  5. The new Owner receives immediate control
Important: This action cannot be undone by the previous Owner. The new Owner must initiate a reverse transfer if needed.
When you have multiple Admins:
  • Document each Admin’s area of responsibility
  • Use audit logs to track configuration changes
  • Consider creating rotation schedules for large teams
  • Establish escalation paths for Owner-level decisions
For contractors or temporary staff:
  • Create them as Members with expiration calendar reminders
  • Document their access period in your internal systems
  • Set calendar reminders to remove them when the contract ends
  • Consider using time-limited IDP accounts if your IDP supports it

​
Troubleshooting

Common causes:
  • Email domain doesn’t match verified domain
  • User’s IDP access hasn’t been granted yet
  • Invitation link expired
Solution: Verify domain verification is complete and resend the invitation.
Cause: Only Owners can remove Admins.Solution: Ask an Owner to perform the removal, or if you need to remove your organization’s sole Owner, contact [email protected].
When you’ve reached your license limit:
  • Remove inactive members to free seats
  • Revoke pending invitations that are no longer needed
  • Upgrade your license to add more seats

​
Next Steps

Now that you understand member management, proceed with configuring your organization:

Configure Providers

Set up API providers for your team to use

Monitor Usage

Track team activity and resource consumption
Getting Started Fast? The quickest path is: 1) Invite your team as Members, 2) Configure one API provider, 3) Let your team start using Cline. You can refine roles and settings later.