Section 1.4: Team Management & Permissions

Managing a production team or agency workspace requires clear roles, access control, and granular permissions. The Team tab on your organization dashboard is the central workspace for adding members, assigning roles, and configuring access.

1. Workspace Roles

ABRAM Network offers three main administrative roles to organize your workspace:

• Owner: The primary workspace creator. Has complete control over the organization, including billing, custom roles, permissions, and the ability to delete or transfer the workspace.
• Admin: Full administrative permissions to manage team members, invite new users, configure equipment logistics, and modify all projects. Admins cannot delete the organization or modify the Primary Owner's role.
• Member: Standard production staff or crew access. A Member's access to billing, invoicing, logistics, and specific projects is entirely controlled by their assigned Granular Permissions.

2. Granular Permissions (Admin & Member Settings)

Administrators can customize the access level for any individual Admin or Member to match their department duties. Open the Edit Team Member modal on any user to adjust these toggles:

• Team Management: Allows the user to invite new team members, edit member details, remove members, or adjust their permissions.
• Financial Access: Allows the user to view project budgets, freelancer/crew rates, company expenses, and invoices.
• Org Profile Management: Allows editing the organization's public profile (uploading company banners, changing logos, editing the bio, and managing highlights).
• Resource Management: Allows the user to manage equipment inventory, condition logs, storage locations, and schedule equipment logistics.
• Financial Management: Allows the user to create, edit, and cancel invoices for their projects.
• Internal Project Requests: Allows the user to configure the project request intake form and manage the submissions inbox.
• Postings Management: Note: Only visible and active when the platform is switched to the Marketplace Phase. Allows creating, editing, and publishing job opportunity postings to the external network.
• Discover Page Access: Note: Only visible and active when the platform is switched to the Marketplace Phase. Allows browsing and searching the external talent network on the Discover page.
• Project Access Settings:
  • Manage All Organization Projects: The member can view, create, edit, and manage team access for all projects in the organization.
  • Assigned Projects Only: The member is restricted strictly to projects they are explicitly added to. They can view project details and add or check off deliverables.

3. Enterprise SSO & Directory Sync (Enterprise Tier Only)

Enterprise workspaces can configure corporate Single Sign-On (SSO) and automatic directory sync to manage member authentication and accounts:

• Tier Gating: SSO and directory sync features are exclusive to the Enterprise plan tier. Self-service settings for these features are locked by default in the Organization Settings tab under Enterprise Authentication.
• Setup Activation: To configure these settings, the organization owner must contact support to coordinate with your IT administrator. Once domain verification is complete, configuration controls will unlock in the settings tab.
• Directory Control: When directory sync is active, team member rosters, account activation status, and role mappings are driven entirely by your corporate identity provider (e.g., Okta, Microsoft Entra ID).
• Local Read-Only Lock: Local editing of names, roles, organization memberships, and granular permissions is disabled in ABRAM for members added via directory sync. Sync-locked profile cards in settings (such as Department, Division, Employee Number, Employee Type, Manager, and Internal Rate) display as read-only, and their visibility overrides ("Show on Company Profile", "Allow Public Profile") are locked to prevent manual changes. Any updates must be made in the corporate identity provider dashboard and will reflect in ABRAM automatically.

4. HR Profile and Capacity Data

In addition to permissions, you can manage professional and operational data for each team member within the edit dialog. Both team members (via their profile settings) and administrators can update these fields:

• Primary Title: e.g., "Director of Photography", "Production Manager".
• Organization Hierarchy: Set their Department (e.g., "Post-Production"), Division, Employee Number, Employee Type (Employee, Freelancer, Intern, Consultant), and Reports To (manager mapping).
• Billing Details: Set their internal hourly rate (only visible to users with Financial Access permissions).
• Availability Status: Choose between Available (Bench), Assigned to Project, or Unavailable. This helps scheduling coordinators filter available staff.
• Internal Bio / Staffing Notes: A private bio field for team members to leave notes for staffing coordinators (e.g., skill notes, project preferences, or scheduling constraints) that are only visible to organization administrators.

Visibility Overrides

• Show on Company Profile: Set whether to display this team member in your organization's public member directory.
• Allow Public Profile: Toggle whether to permit this employee to publish an individual public freelancer profile on the network.

5. Inviting Team Members

1. Navigate to the Team tab.
2. Click Invite.
3. Enter the invitee's email address, first name, last name, primary role, and department.
4. Set their initial platform access tier (Admin or Member) and optional hourly rates.
5. Send the invitation. The user will receive an email containing a link with an invitation token. Once they log in, they are automatically joined to your organization.