Docs
Identity & Access Management
Managing Teams

Managing Teams

Teams in Thalassa Cloud let you group organisation members together. This makes it easier to manage access. Instead of assigning roles to each person individually, you can assign roles to teams. Everyone in the team gets the same permissions.

Teams help you organise your organisation’s structure. You can create teams for different departments, projects, or functions. For example, you might have a “backend-developers” team or a “devops” team. This makes it easier to see who has access to what.

How Teams Work

Teams are collections of organisation members. When you create a team, you can add members to it. You can then assign roles to the team instead of to individual members. Everyone in the team gets the permissions from those roles.

Think of teams like groups in a company. You might have a “development” team with all the developers. You can assign a role to the entire team, and all developers automatically get those permissions. If someone joins or leaves the team, they automatically get or lose those permissions.

Teams make it easier to manage access at scale. When you need to change permissions for a group of people, you just change the team’s roles instead of updating each person individually.

When to Use Teams

Use teams when:

  • You have groups of people who need the same permissions
  • You want to manage access for multiple people at once
  • Your organisation has clear departments or projects
  • You want to simplify role management

For example, you might create teams for:

  • Departments: “engineering”, “sales”, “support”
  • Projects: “project-alpha”, “project-beta”
  • Functions: “backend-developers”, “frontend-developers”, “devops”
  • Environments: “production-team”, “staging-team”

Don’t use teams for single users. If only one person needs specific permissions, assign roles directly to them instead.

Creating Teams

Step 1: Navigate to Teams

  1. Go to IAM in your organisation dashboard
  2. Click on the “Teams” tab
  3. Click “Create Team” button

Step 2: Enter Team Details

Enter a name for your team. Use descriptive names that explain what the team is for. For example:

  • backend-developers for backend developers
  • devops-team for DevOps engineers
  • production-support for production support staff

Add a description that explains the team’s purpose. This helps others understand who should be in this team and what permissions they need.

Step 3: Create the Team

Review your configuration and click “Create Team”. The team is now created and ready to use.

Managing Team Members

After creating a team, you can add members to it. You can also remove members when they no longer need to be part of the team.

Adding Members to a Team

Step 1: Navigate to the Team

  1. Go to IAM → Teams
  2. Select the team you want to add members to

Step 2: Add Members

  1. Click “Add Members” or “Manage Members”
  2. Select the organisation members you want to add to the team
  3. Click “Add” or “Save” to add them to the team

Step 3: Verify Members

Check that the members are added to the team. They now have access to all roles assigned to the team.

Removing Members from a Team

To remove a member from a team:

  1. Go to the team’s page
  2. Find the member you want to remove
  3. Click “Remove” or “Delete”
  4. Confirm the removal

When you remove a member from a team, they lose access to all roles assigned to that team. They keep any roles assigned directly to them.

Assigning Roles to Teams

Teams can have roles assigned to them, just like individual users. When you assign a role to a team, everyone in the team gets the permissions from that role.

Assigning Roles to Teams

Step 1: Navigate to the Team

  1. Go to IAM → Teams
  2. Select the team you want to assign roles to

Step 2: Assign Roles

  1. Click “Assign Roles” or “Add Role Binding”
  2. Select the role you want to assign to the team
  3. Optionally set the scope of the role binding (resources, time limits)
  4. Click “Assign” or “Create” to assign the role

Step 3: Verify Role Assignment

Check that the role is assigned to the team. All team members now have the permissions from this role.

Removing Roles from Teams

To remove a role from a team:

  1. Go to the team’s page
  2. Find the role you want to remove
  3. Click “Remove” or “Delete”
  4. Confirm the removal

When you remove a role from a team, all team members lose access to the permissions from that role.

Understanding Team Permissions

Team members get permissions from two places:

  1. Roles assigned to the team: Everyone in the team gets these permissions
  2. Roles assigned directly to the member: Individual members keep these permissions even if they leave the team

When checking what someone can do, Thalassa Cloud combines permissions from both sources. If a team member has a role directly assigned to them, and the team also has a role, they get permissions from both.

For example, if a developer is in the “backend-developers” team with read access to Kubernetes, and they also have a direct role with write access to a specific namespace, they can:

  • Read all Kubernetes clusters (from the team role)
  • Write to the specific namespace (from their direct role)

Related Documentation

Inviting MembersRBAC Roles