Skip to content

Team Management

Invite team members, assign roles, and manage access to your fleet.

Invite a member

  1. Go to Settings > Team in the dashboard
  2. Click Invite member
  3. Enter their email address and select a role
  4. They'll receive an email with a signup/login link

Or via API:

curl -X POST https://app.kvmfleet.io/v1/team/invites \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"email": "colleague@example.com", "role": "member"}'

Roles

Role Permissions
owner Full access. Manage billing, team, devices, settings. One per org.
admin Manage devices, team members, alert rules. Cannot manage billing.
member View devices, open console sessions, view audit logs. Cannot manage team or settings.

Row-level security

All data access is enforced at the database level via Postgres RLS. Team members can only see devices and logs belonging to their organization — even if they craft raw API requests. See Row-Level Security for details.

Remove a member

  1. Go to Settings > Team
  2. Click the menu icon next to the member
  3. Click Remove

Their access is revoked immediately. Active console sessions are terminated.

SSO

All authentication uses Google OIDC. Team members sign in with their Google account — no separate passwords to manage. The platform matches users to organizations by their invite email.

Note

SAML and Keycloak support are on the roadmap.