Organization and User Management

Membership

Permissions in Sentry are broadly handled using organization-level roles, which apply to all teams and projects in the organization. Users on a Business or Enterprise plan, have access to team-level roles, which enable more granular permissions.

Organization-level Roles

All users and their organization-level roles are listed in Settings > Members. Users can hold any of the following org-level roles:

• Billing users can manage payment and compliance details.
• Org Members can view most data in the organization and act on issues. They can join and leave teams, and access projects their teams own. For Business and Enterprise plans, members can also create personal projects.
• Org Admins can edit global integrations, manage projects, and add/remove teams. They automatically assume the Team Admin role for teams they join. Note: This role can no longer be assigned in Business and Enterprise plans.
• Org Managers have full management access to all teams and projects. They can also manage the organization's membership. Org Managers can perform Team Admin actions without needing to join the team.
• Org Owners have full access to the organization, its data, and settings. Org Owners can perform Team Admin actions without needing to join the team.

Permissions

Organization-level roles enable broad access to the entire organization, as described in the table below:

*Org Members will only be able to edit ownership rules for the project.

**If your organization is on a Business or Enterprise plan, anyone who's part of the org will be able to create a project without having to be a Team Admin. When org members create a project, they'll become the Team Admin for that project by default and have all the permissions of the Team Admin for that project.

Team-level Roles

All members of a specific team and their team-level roles are listed in Settings > Teams > [Team] > Members. Alternatively, go to Settings > Members > [Member] to see a specific member's teams and team-level roles.

Only Org Admins, Managers, and Owners can add new teams to an organization. Users can join a team with one of the following team-level roles:

• Team Contributors can view and act on issues. Depending on the organization rules, they can also add members to the team.
• Team Admins have additional permissions to manage their team's membership and projects. These permissions are granted at the team-level, and don't apply to teams where they're not a Team Admin.

Org Members can join teams as a Team Contributor and be assigned Team Admin for specific teams. Org Members who are not a Team Admin for any team can create a new personal project and personal team once, and become Team Admin for that team.

Org Admins automatically become Team Admins when they join a team.

Org Managers and Owners can perform Team Admin actions for all teams without needing to join.

Permissions

Team-level roles enable more granular access to a specific team, as described in the table below:

*Only for teams or projects owned by teams they're a Team Admin for.

Edge Cases

If a user holds multiple roles that grant different types of access to a single resource (like a project or repository), a union of those permissions is applied.

Let's say a user is a Team Admin for Team 1 and a Contributor for Team 2, and both teams own Project A. The user can:

• View and act on issues in Project A.
• Change settings for Project A.
• Add and remove Contributors for Team 1, but not for Team 2.
• Remove Project A from Team 1, but not from Team 2.
• Add Project A to Team 3 (which they are a Contributor in) and Team 4 (which they are not a member of).
• Create a new project, Project B, for Team 1. (New projects can only be created and owned by teams the user is a Team Admin for.)
• Add Project B to Teams 2, 3, and 4.

Project Access and Team Membership

Projects can only be accessed by that project's team(s). Team Admins, Org Managers, and Org Owners can add or remove project teams in Project Settings > Project Teams. Alternatively, these roles can also add projects to a team in Team Settings > Projects.

Any Org Member can get access to a project by joining the team that's associated with that project. Once you've joined a project you'll also be able to edit ownership rules for that project.

Adding New Members

Users with Manager and Owner-level permissions can add, remove, and change members for a project or organization. They can also toggle on the "Let Members Invite Others" setting to allow any org member to freely invite anyone they like without needing org owner or manager approval.

Open Membership

Team membership is open by default. All members can join, leave, and add other members to teams.

To restrict access to teams and projects, turn off "Open Membership" for the organization in Settings > General Settings.

If "Open Membership" is toggled off, team access is on an invite-only basis. Users can request to join a team and invite others to join their teams, but access requests and invitations must be approved by an Org Manager, Org Owner, or a Team Admin for that team. Org Admins who aren't part of the team also need to follow this process to join. Once they join, they automatically become a Team Admin.

Transfer a Project

Only Org Owners can transfer a project to another organization. To do so, go to the target project's Project Settings > General Settings and click "Transfer Project". Enter the new Org Owner's email. The Owner for the receiving organization then receives an email to approve the transfer.

When transferring a project to a new organization, we recommend also adding a new team to the project for better visibility.

Remove an Organization

If you're an Org Owner, you can remove an entire organization and all its associated data completely.

A user can be a Member of several organizations, so deleting an organization doesn't delete user accounts.

To remove an organization, go to the Organization Settings page and click "Remove Organization", which then prompts you for confirmation. After confirmation, your organization is queued for deletion.