Everyone in Core GRC belongs to an organization. Their role decides what they can see and change in each module.

Invite someone

  1. Open Organization settings.
  2. Invite the person by email and choose their role.
  3. They get an email invitation. Once they accept, they can sign in to your organization.

Choose a role

Role What they can do
Owner Holds the organization. Manages billing, settings, members, and every module.
Admin Manages organization settings and members, and works across the modules.
Member Does the day-to-day work in the modules your organization has turned on.
Viewer Reads records without changing them.
Custom A set of permissions you save as a role and reuse.

Within each module, view permission lets someone read records. Manage permission also lets them create, change, archive, and delete.

Keep sign-in secure

Your organization can require two-factor sign-in, so members must set it up before they can open the workspace. Single sign-on with Google or Microsoft Entra ID is available on request. Contact us to set it up.

See Roles and permissions for how these checks apply in the app, over MCP, in the CLI, and through the API.