Quick answer
An admin sees each user's role and team grants in Administration, under Users. In the API, GET /api/users does the same and needs the user:read permission. GET /api/teams adds the members and grants of each team.
Steps
- Confirm you hold
user:read. The header of every page shows your own role badge, for example SuperAdmin, though the badge does not list permissions. - Open Administration and go to Users. Each user appears with a role and any team grants.
- Open the teams section. Each team shows its members and grants.
- For a script, send
GET /api/users. It lists users with role and team grants. SendGET /api/teamsfor teams with members and grants. - Compare what you see with what each person needs, and take away anything extra, especially access that was granted for a short project and never reviewed again.
We did not review the Administration screens. The API descriptions above come straight from the API Reference, and your screen may word things differently, so follow what you see.
Good to know
| Question | Where the answer is |
|---|---|
| What role does a user hold? | The user list |
| Which team grants apply? | The user list and the team list |
| What may a role do? | The role's permission keys |
| What did they do lately? | The Activity feed |
Run this review on a schedule, such as every quarter. Leavers, role changes and short-term access pile up quietly, and a quick look keeps access close to least privilege.
- To see what a role contains, read which permissions a custom role can hold.
- To change access, read how to add a user or how to remove one.
- Your own role shows in the page header, as explained in how to check your role.
Related questions
- Which roles come built in?
- Which permissions can I give a custom role?
- How do I add a new user to my workspace?
- How do I remove a user from my workspace?
- How can I see which role I'm signed in with?
Full tutorial
Cyberlop API tokens and permissions: how to issue and limit them
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.