Skip to main content

Account Membership

Concepts​

How Membership Works​

Users do not self-register on Cogrion. An account Owner or Admin invites them by email. The invitation triggers the platform to create a user account and send login credentials automatically — the invitee does not need to set a password manually.

Once a user accepts their invitation, they become a member of the account and can sign in.

Two Layers of Roles​

Every account member carries two layers of roles:

Account role — controls what they can manage within the account itself:

RoleCodeWhat they can do
OwnerAccountOwnerFull control — manage members, roles, and all account resources
AdminAccountAdminManage members and account resources, but cannot transfer ownership
MemberAccountMemberView access only; cannot manage members or account settings

Member roles — controls which platform features they can access. Each member holds one or two:

RoleDescription
Platform AdminFull administrative access to platform features
Data EngineerAccess to data pipelines and engineering tools
ML EngineerAccess to machine learning features and model management
Data AnalystAccess to SQL, dashboards, and analytics tools
Business UserRead-only access to reports and dashboards
Data StewardAccess to data catalog and governance features
Tenant AdminAdministrative access at the tenant level
Current limitation — Member roles are account-scoped

At present, member roles (Platform Admin, Data Engineer, etc.) are applied at the account level, meaning they apply uniformly across all workspaces the user can access. The intended model is for these roles to be scoped per workspace, so a user could be a Data Analyst in one workspace and a Data Engineer in another. This change is planned but not yet implemented.

Invitations​

When a member is invited, the invitation stays in a Pending state until accepted. If it expires before the user accepts, a new invitation must be sent. Once accepted, the status changes to Accepted and the user can sign in.

Current UI — Managing Account Members​

This section describes the current interface. It will be updated when the new Oqullus UI launches.

Inviting a New Member​

Requires: Account Owner or Admin role

  1. Go to My Account in the sidebar.
  2. Click the Members tab.
  3. Click Invite Member.
  4. Enter the member's email address.
  5. Select an Account Role (Owner, Admin, or Member).
  6. Select 1 to 2 Member Roles from the list.
  7. Click Send Invitation.
Placeholder — Invitation Expiry

The exact expiry window for invitations will be documented once confirmed.

Viewing Invitations​

Requires: Account Owner or Admin role

  1. Go to My Account in the sidebar.
  2. Click the Invitations tab.
  3. Use the status filter to view invitations by state: Pending, Accepted, or Expired.

Updating a Member's Roles​

Requires: Account Owner or Admin role

  1. Go to My Account → Members tab.
  2. Click the pencil icon on the member's row.
  3. Update the Account Role and check or uncheck Member Roles (select 1 to 2).
  4. Click Save.

Removing a Member​

Requires: Account Owner or Admin role

  1. Go to My Account → Members tab.
  2. Click the trash icon on the member's row.
  3. Confirm by clicking Remove.

The member loses access immediately. You cannot remove yourself from the account.