Share access
Airbrx accounts hold one or more tenants; access to each tenant is granted independently. The App's team page is where you invite teammates, see who has what, and revoke when someone moves on.
Invite someone to a tenant
Pick a role, send an invite. The role describes what they can change once they sign in.
Revoke access
Remove a member from a tenant. Tokens they owned in that tenant stop working the moment access ends.
Tenants vs accounts
An account is the billing entity that owns plan choices, custom domains, and seats. A tenant is the rule/cache scope and the source of the gateway address your BI tools connect to. Members are invited per-tenant; a single account can host many tenants with different teams on each.
Account-level changes (plan, custom domain, billing contact) require account-admin permission and aren't covered on these pages. They live with the person who set up billing.
How roles work in plain language
Airbrx roles describe what a member can change in the App:
- Viewer — can open the dashboard, traffic page, and read every rule. Can't change anything.
- Operator — viewer plus the ability to post invalidation markers and adjust connection settings. Can't edit rules or invite other members.
- Rules-admin — operator plus the ability to write and delete rules. Most day-to-day tuning happens with this role.
- Tenant-admin — full control over the tenant, including inviting and removing members. Reserve this role for the people who own the tenant.
Least-privilege is the default — pick the lowest role that lets the person do the work in front of them, and elevate later if they need more.