Members and RBAC
Role-based access control (RBAC) determines what an organization’s members can manage. Nexigon provides two organization roles:
| Role | Access |
|---|---|
| Admin | Manage the organization and its resources, including settings and membership. |
| Member | Access and manage devices in the organization’s projects, including remote access and device certificates. Cannot modify organization settings. |
Organization API tokens have their own policies. See Access Tokens.
Inviting Members
An organization administrator can invite a user through Members → Invite User by entering their email address. Nexigon does not reveal whether an account exists for that address.
An invitee can accept an invitation from Invitations in the user menu after signing in with the invited email address. On instances with invitation email delivery enabled, the email directs an existing user to invitations or a new user to signup. The invitation remains available in the web interface if no email arrives.
Nexigon Cloud rejects personal and disposable email addresses for signups and email changes. An invitation lifts the restriction on personal addresses, so you can invite people who use a personal email provider such as Gmail.