Team Management

Manage your team members, roles, and access from Settings → Tenant Settings → Team Members. Cracken uses role-based access control to govern what each team member can do within your tenant.

At a glance

• What it is — Role-based membership management for a tenant: who belongs, what role they hold, and a per-tenant model-training privacy preference.
• When to use it — Add an existing account, invite a new user by email, manage pending invitations, remove a team member, change a member's role, delete an eligible account, or control whether tenant prompts and responses may contribute to model training.
• Inputs — An existing user's email or username, an invitee email and role (Owner, Admin, Member), or a pending invitation action; for the training preference, an improve_model_training boolean.
• Outputs — Tenant membership records with access changes that take effect immediately; for privacy, outbound model requests marked for redaction when training is disabled.
• Related objects — Realms
• Common actions — Add member, Invite by email, change role, Remove, Delete account, Resend invitation, Revoke invitation.
• API / tool links — managed in the UI under Settings → Tenant Settings; the supported programmatic surface is MCP.

Adding an existing team member

Use Add member when the person already has a Cracken account:

1. Navigate to Settings → Tenant Settings → Team Members.
2. Select Add member.
3. Enter the person's email address or username.
4. Select a role and submit the form.

The member is added immediately. If the account does not exist, ask the person to create one first or use Invite by email when email invitations are available for the tenant.

Inviting a new team member

Step-by-step instructions

To invite a new member to your tenant:

1. Navigate to Settings → Tenant Settings → Team Members.
2. Select Invite by email.
3. Enter the email address
4. Assign a role
5. The invitee receives an email with instructions to join

Pending invitations appear on the Team Members page. Owners and admins with team-invite access can resend or revoke them.

Roles

Roles control what actions a team member can perform. Each member is assigned exactly one role within a tenant.

Role	Capabilities
Owner	Full access — manage team, billing, realms, and all settings
Admin	Manage realms, operations, Tentacles, and configuration
Member	Run operations, view data, and manage artifacts within assigned realms

A Tentacle installed with Only me is the one exception to every row above: it is invisible and unusable to everyone else in the workspace, Owners and Admins included. See Keep a Tentacle to yourself.

Changing roles

To change a team member's role:

1. Navigate to Settings → Tenant Settings → Team Members
2. Find the member in the list
3. Select a new role from the role dropdown
4. The change takes effect immediately

Removing team members

To remove a member from your tenant:

1. Navigate to Settings → Tenant Settings → Team Members
2. Find the member
3. Click Remove
4. Confirm the removal

Removed members lose access to all tenant data immediately.

Owners can change roles. Admins can manage members but cannot assign ownership or change roles. Members can view the roster but cannot invite, remove, delete, or change roles.

Deleting an account

Use Delete account when an owner or admin needs to permanently remove an eligible member account. The action is separate from removing the member from the current tenant and requires confirmation. An account that belongs to another tenant is not eligible for deletion from this tenant.

User profiles

Each user can update their own profile information:

• Username — display name shown in the UI
• Profile details — personal information and preferences

Profile changes apply across all tenants the user belongs to.

Open Settings → Profile Settings to manage these personal settings separately from tenant settings.

Model Training / Privacy

The Model Training card on Settings → Tenant Settings → Data & Privacy controls whether prompts and responses from the tenant may contribute to Cracken model improvement. The setting applies to every member of the tenant.

• Location — Settings → Tenant Settings → Data & Privacy, the Model Training card.
• Behavior — when the toggle is enabled, tenant prompts and responses may contribute to model improvement. When it is disabled, outbound model requests are marked for message redaction.
• Plan gating — whether model training is a self-serve toggle depends on how your plan is priced.
  • On self-serve plans that support the toggle (Pro and Team), you can turn it on or off from the card.
  • On usage-priced self-serve tiers (Trial and Starter), the preference stays enabled and read-only — those tiers are priced on prompt contribution — and the card surfaces an Upgrade link. Attempting to change it is rejected with Model training is only configurable on Pro and Team plans.
  • On sales-managed plans (Business, Enterprise, and Custom), model training is off and not configurable: data handling is fixed by your Cracken agreement rather than by a self-serve toggle. The card shows "Model training is governed by your Cracken agreement. Contact support to change it." and never offers an upgrade. Attempting to change it is rejected with the same message.

The card is read-only unless your plan allows the change and you are a tenant owner or admin.

On self-hosted / on-premises deployments the Model Training card is not shown, and model training is off for the deployment — prompts and responses are not used for Cracken model improvement.

Tenant switching

Users can belong to multiple tenants. Switch between tenants using the tenant selector in the sidebar. Each tenant has its own team, realms, and settings — switching tenants changes the entire context.