Agent WranglersRoles and permissions Recommended
Let owners see who can do what
Give organisation owners one page that lists every member, role, sign-in method and last activity, with pending invitations, API keys and an export.
How to do it
Show each member's role, whether it comes from the directory, their factor types and last activity. List pending invitations and API keys with their creators. Flag members and keys unused for 90 days. Offer a CSV export, because audits such as SOC 2 and ISO 27001 ask for access reviews.
How to check
Open the page as a test owner. Every member, invitation and key appears, and the CSV export has the same rows.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/roles-and-permissions/access-review.