Team & access management
Team & access management is where you control who can get into your Novex workspace and what each person is allowed to do once they are in. It spans internal teammates with full accounts, time-limited external collaborators, and the security controls that protect every active session.
Everything here lives under Settings, and most actions require an administrator role. If you cannot see these pages, ask one of your workspace admins to grant you access.
What you can do
| Area | What it covers | Where |
|---|---|---|
| Team & roles | Invite teammates, manage members, assign roles, build custom roles | Settings → Team and Settings → Roles |
| External collaborators | Give a vendor, client, or partner scoped access via a magic link | Settings → Team → Invite external |
| Security & sessions | Review and revoke active sessions, sign out everywhere | Settings → Security |
When to use this
- Onboarding a new hire — invite them by email and assign a role that matches their job (e.g. a finance manager vs. an event coordinator).
- Working with a vendor or client — instead of creating a full account, send a time-limited external invite that exposes only what they need.
- Tightening security — review who is signed in and revoke any session you do not recognise, or after a device is lost.
How access is enforced
Novex uses role-based access control (RBAC). Every action in the product is gated by a permission, and permissions are grouped into roles. When you assign a role to a teammate, you grant them exactly that set of permissions — no more, no less. This keeps the workspace least-privilege by default and makes audits straightforward.
External collaborators sit outside this model entirely: they never receive a full account, only a scoped, expiring portal link.