Teams and roles
Create teams, invite members, and see what each role can do.
Every app belongs to one team. Who can see and change an app, and where its costs are billed, are all decided per team.
When you sign up, a starter team is created and set as your default. It is an ordinary team with the same permissions and deletion rules as any other. You can create more teams or join others by invitation.
Create and switch teams
ntro teams list # teams you belong to
ntro teams create 'Example Team' --slug example-team
ntro teams switch example-team # change your default team
ntro apps create example-app --team example-team # create an app in a specific teamAdd --team <id or slug> to any command to run it against that team instead of your default. Resources of teams you have no access to are not visible.
If your default team is deleted or you leave it, your oldest remaining team becomes the default. With no teams at all your account still works, but you must create a team or accept an invitation before creating an app.
Roles
| Role | Apps | Team and members | View usage and billing | Change billing settings |
|---|---|---|---|---|
owner | Manage | Manage | ✓ | ✓ |
member | Manage | — | ✓ | — |
billing | — | — | ✓ | ✓ |
viewer | Read | — | — | — |
viewer can see app details and app traffic analytics without costs. There is no admin role.
Invite members
Only the team owner can send invitations. The role can be member (the default), billing, or viewer.
ntro teams invitations create colleague@example.com --team example-team --role viewer
ntro teams invitations list --team example-teamntro teams members add colleague@example.com --role viewer sends the same invitation. An interactive terminal asks for the email and role; automation must provide both.
What the invitee does: open the link in the email, sign in with the account for the invited email address, and accept. Even someone who already has a Nitroship account must accept; an invitation alone does not add them.
| Situation | What happens |
|---|---|
| Seven days pass | The invitation expires and its link can no longer be accepted. |
create again for the same email | The pending invitation gets a new link and expiry, and the email is sent again. |
| Cancel an invitation | Revoke it by email or invitation ID. Revoked links cannot be accepted. |
ntro teams invitations revoke colleague@example.com --team example-team --yes
ntro teams invitations revoke '<invitationId>' --team example-team --yesRemove a member
ntro teams members remove colleague@example.com --team example-team --yesIt asks for confirmation first. Add --yes in CI and scripts.
Transfer ownership
A team has one owner. You cannot invite someone directly as owner, so transfer it this way:
- Invite the new owner as
member,billing, orviewer. - Wait for them to accept and become a member.
- The current owner changes that member's role to
owner.
ntro teams members list --team example-team
ntro teams members role colleague@example.com owner --team example-teamThe moment the role changes, the new owner is set and the previous owner becomes member at the same time. If a team had several owners from before, all of them become member, leaving only the new owner.
Owners cannot remove themselves or lower their own role. To leave, transfer ownership first and then leave as an ordinary member.
Delete a team
An owner can delete any team they own, including the starter team, as long as it has no active apps. If active apps remain, the request returns 409 team_has_apps. Apps that were already deleted do not block it.