Roles and visibility in Cortex
Invite your team, and control what each person can do and see in Cortex.
Watch the walkthrough
A 1:45 walkthrough of inviting people and changing their access.
Roles
| Role | What it allows |
|---|---|
| Member | Use Cortex within assigned visibility; no organization capture-policy or user-access management. |
| Admin | Manage organization settings and capture policy within assigned visibility. |
An Admin can have Self visibility. Role, visibility and organization structure are separate settings.
After you sign in
If you created the organization, you're an Admin with Organization visibility. Anyone who signs in later with a work email on your domain joins as a Member with Self visibility. Your role is shown under your email in the account menu.
What each role sees
| Area | Member | Admin |
|---|---|---|
| Atlas | Sessions, Usage, People, Workstreams | The same, plus Connections |
| Gateway | Overview, their own API Keys, Routing, their teams | All of Gateway, including Usage, Providers, budgets, rate limits and Security |
| Organization settings | Their own access | Every tab, including Users and Permissions |
Members only see the data their visibility allows. If a Member opens an admin page, Cortex shows Only organization admins can open this page.
Visibility
| Scope | Included data |
|---|---|
| Self | Your scoped activity. |
| Team | Your activity and active Members sharing a team. |
| Organization | Organization data on pages supporting that scope. |
Organization-wide visibility applies only on pages that support it.
Invite your team
Cortex doesn't send invitations. Share cortex.chaoslabs.xyz with your team and have them sign in with their work account: Google, your company's single sign-on, or a code sent to their email. They join as Members.
To give someone a different role from the start, add them before they sign in:
-
In the account menu, select Settings, then select Add user on the Users tab.
Select Add user on the Users tabOpen in Cortex -
Enter their work email, pick a Role and Visibility, and select Add. The access applies when they first sign in.
Enter the work email, choose a Role and a Visibility, then select AddOpen in Cortex
| Message | Action |
|---|---|
| email domain is not managed by this organization | Use their work email on your organization's domain. |
| email is not available | That email already has a Cortex account. Contact Chaos Labs. |
Change a role or visibility
-
On the Users tab, find the person. Their Role and Visibility are in the row.
The Role and Visibility columns show each person's accessOpen in Cortex -
Open the menu at the end of the row and select Edit access.
Open the row menu and select Edit accessOpen in Cortex -
Pick a Role and Visibility, then select Save.
Choose a Role and a Visibility, then select SaveOpen in Cortex
You can't change your own role. Cortex shows You cannot remove your own administrative access. Ask another Admin to do it. To remove someone, set Status to Deactivated and select Save. They can no longer sign in.
Check what someone can see
-
On the Permissions tab, pick the person under Person.
Choose the person under Person on the Permissions tabOpen in Cortex -
Check Defaults and availability. Each page shows Available or Unavailable for that person.
Defaults and availability for a MemberOpen in Cortex
Teams and departments
Teams
Team visibility includes active Members who share at least one team. People can belong to multiple teams; their primary team supplies reporting context.
Departments
Department membership does not grant Team visibility. Moving teams/people between departments does not change role or visibility.
Budget access
Budget edits require the Admin role. A reporting relationship, manager title, or Team membership does not grant budget-edit authority. Viewing Team spend is separate from permission to edit its budget.
Cortex checks permission when you view or edit a budget. Confirm access to the chosen Organization, Team or Member; visibility still limits supporting activity.
Get help
Ask your Cortex contact for role, visibility, team or department changes. Include the person's work email, what they need to see and what they need to manage. To investigate missing activity first verify a fresh capture.