Skip to main content

Manage teams and roles

Semgrep allows you to manage user membership and access to Semgrep resources, such as scans, findings, and repositories or codebases you have added to Semgrep. To configure those settings, go to Settings > Access in Semgrep AppSec Platform.

Invite a user through email​

You can add new users to your organization by sending them an email. This email contains instructions for them to join your org through the same auth provider configured for your account. The invitation only facilitates access for users who are already provisioned in the configured auth provider.

You must be an admin to perform this operation.

  1. Sign in to Semgrep AppSec Platform.
  2. Click Settings > Access. This brings you to the Users tab.
  3. Click Invite users.
  4. In the dialog, enter your team members' email addresses. You can invite up to 20 users at a time. Separate each email address with a Space or Tab key. You can also paste a comma-separated list of email addresses.
  5. Click Send invites.

Set a default role for the organization​

Users are assigned a role based on your organization's default. New organizations are created with the default role set to admin. To change this setting, perform the following steps:

  1. In Semgrep AppSec Platform, click Settings.
  2. Click Access > Defaults.

Change a user's role​

You must be an admin to perform this operation.

  1. Sign in to Semgrep AppSec Platform.
  2. Click Settings > Access.
  3. Search for the user whose role will be changed.
  4. Click on the user's current role, under the role header. A drop-down box appears.
  5. Select the new role for the user.
note

You cannot change your own role.

Enable teams​

  1. Sign in to Semgrep AppSec Platform.
  2. Click Settings > Access > Teams.
  3. Optional: Click Yes, add new users to the default team if you want new members and projects to be added to the default team.
  4. Click Enable.
  5. Read the dialog box to ensure that your settings are correct, then click Enable beta.

When you have enabled teams for the first time, a team is automatically created with the name of your deployment. This preserves the settings you previously had using the Users feature; all current members retain their existing projects.

View your teams​

You must be an admin or manager to view the Teams tab.

  1. Sign in to Semgrep AppSec Platform.
  2. Click Settings > Access > Teams.

Create a team​

  1. In the Teams tab, click New team. The Create New Team form appears.
  2. Enter a Name for the team.
  3. The Projects tab opens. Click the checkbox next to the name of the projects you want to give access to. You can also use the Search box or tags to help you find projects.
  4. Click the Users tab, then click the checkbox next to the name of the team members you want to add. You can also use the Search box to help you find members.
  5. Optional: Appoint a manager. Under the Role column, click the drop-down box and select Manager.
  6. Click Create.

Create a subteam​

  1. In the Teams tab, click Add subteam next to the name of the top-level team you want to create a subteam for. The Create new subteam form appears.
  2. Enter a Name for the subteam.
  3. The Projects tab opens. Click the checkbox next to the name of the projects you want to give access to. You can also use the Search box or tags to help you find projects.
  4. Click the Users tab, then click the checkbox next to the name of the team members you want to add. You can also use the Search box to help you find members.
  5. Optional: Appoint a manager. Under the Role column, click the drop-down box and select Manager.
  6. Click Create.
info
  • You must have at least one team before you can create a subteam.
  • In subteams, you can add members that are not part of the top-level team.

Manage your teams​

Update an existing team or subteam​

  1. In the Teams tab, click the edit icon on the row of the team or subteam you want to edit.
  2. Make your changes.
  3. Click Review > Save changes.

Delete a team or subteam​

  1. If you are deleting a team, delete its subteams first.
    1. In the Teams tab, click the down arrow to show all subteams under a team, then follow steps 2-3.
  2. Click the trash can icon.
  3. Click Delete to confirm.

Appoint a manager​

To set a member as a manager for a subteam:

  1. In the Teams tab, click the edit icon on the row of the team or subteam you want to edit.
  2. Click on the Users tab.
  3. Under the Role column of the member you want to appoint, click the drop-down box and select Manager. Perform this step for all members you want to set as managers.
  4. Click Review.
  5. Click Save changes.

View and edit subteams​

info

This feature is currently in invite-only beta. Please contact Semgrep Support for more information.

  1. In the Teams tab, click the edit icon on the row of the team or subteam you want to edit.
  2. Find the team to which the subteam should be added. Click Add subteam.
  3. Provide a Team name. Click Add projects.
  4. Select one or more projects to add to the subteam. Click Add members.
  5. Select one or more users to add to the subteam. Click Review.
  6. Review the changes you have made. If this looks correct, click Create team to proceed.

Managers can view their subteams by going to the Settings > Access > Teams tab. Within this tab, they are also able to assign any of the projects they manage from one subteam to another.

Note that this feature allows managers to view all projects in the Edit teams panel, including projects they are not assigned to. However, they cannot perform admin-level actions on those projects, such as assigning projects they are not designated to manage.

Filter findings for a team's projects​

  1. Navigate to the Findings page.
  2. Click the Teams filter. This filter displays teams you have access to.
  3. Select the teams you want to see findings for.

Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.