Skip to main content
Organization

Members and Roles

This article explains member management and roles for the Enterprise plans.

Applicable plans: Teams, Enterprise
Organizations support 2 member roles:
  • Admin: A billable role. Has full administrative permissions for the organization. They can access the admin console to manage billing and other settings. Can use all advanced features and the resources associated with their seat.
  • Member: A billable role. Can use all advanced features and the resources associated with their seat. Cannot access the admin console.
The default role for new members is Member. Administrators can change this setting by navigating to Organization Settings > Member Configuration > Default Role.

Role Permissions

FeatureAdminMember
Use the client✓✓
Access seat Credits quota Teams only and advanced features✓✓
Basic organization settings (e.g., name, privacy mode)✓
Identity management configuration✓
Invite members✓
Manage member roles✓
Remove members✓
Usage management✓
Model management Enterprise only✓
Codebase policy Enterprise only✓
Enterprise knowledge base Enterprise only✓
Extensions & Marketplace Enterprise only✓
Analytics & Insights Enterprise only✓
IM channel management Enterprise only✓
Audit log Enterprise only✓
Billing & subscription management✓
Delete organization✓
Occupies a paid seat✓✓

Add Members

You can add members to your organization using multiple methods:
  • By approving applications from an invite link
  • By email invitation
  • By configuring Single Sign-On (SSO) for automatic joining
  • By manual creation Enterprise only
image
 Administrators can navigate to Organization Settings > Member Configuration to enable the invite link feature, set an expiration period, and generate an invite link.
image
 Share this link with the users you wish to invite. If a user is not already part of another organization and meets your domain check requirements (if any), they can use this link to apply to join your organization. When a user applies, you will see a join request on the Member Management page. For security, you must review and approve this request. Once approved, the user will be immediately added to the organization with their assigned role.
image
 The invitation link is reusable and has no limit on the number of invites. Administrators can revoke a created link at any time. Once revoked, the link will become invalid.
For security purposes, only Administrators are allowed to generate invite links.

Email Invitation

Administrators can navigate to Members > Add Members and select email invitation. Choose the invitation validity period and role, then enter the target recipients' email addresses. Multiple email addresses can be pasted at once and will be automatically recognized and populated.
Email invitations do not require additional admin approval — recipients can join the organization directly using the link in the email.

Join via Single Sign-On (SSO)

Administrators can navigate to Organization Settings > Security & Identity to configure Domain Verification and SAML Single Sign-On (SSO). See: After SSO is configured and enabled, any user with an email address from a verified domain will be automatically added to your organization with the default role upon signing in.
When configuring SSO, please review the scope of your verified domains to ensure that users are added automatically as expected.
If the default role is a billable role, the user will immediately occupy a seat and be billed upon joining.If there are no available seats in the organization, users will be unable to join automatically via SSO. In this case, please contact your organization's administrator to purchase more seats, then try logging in again to re-trigger the automatic organization joining.
image

Modify Member Roles

Administrators can modify member roles at any time. Navigate to Organization Settings > Member Management, select the target user, click the ... icon on the right side of the list, and choose the Edit Role option.
  • Assigning a user to a billable role will immediately occupy a seat. Once assigned, the seat is billed for the entire current billing cycle. In Enterprise, the seat is automatically released and can be reassigned after the member is removed. See Remove Members.
An organization must have at least 2 billable members and at least one Administrator.

Remove Members

Administrators can remove members at any time, provided the organization's minimum member and role requirements are met. The removal is effective immediately. Navigate to Organization Settings > Member Management, select the target user, click the ... icon on the right side of the list, and choose the Remove Member option. After removal, the member leaves the organization and is downgraded to the trial plan. Note the following:
  • Enterprise: The seat is automatically released and returned to the unassigned pool. It can be reassigned to another member within the current billing cycle. Seats are assigned automatically in the background, so you do not need to select one manually. A seat can be occupied by only one member at a time.
    • Releasing a seat does not increase the organization's resource quota or Credits.
    • Knowledge in the enterprise knowledge base belongs to the organization and is not deleted or transferred when a member is removed.
  • Teams: Because each seat includes a Credits quota, removing a member clears the remaining Credits on that seat. If the member has not used any Credits during the current billing cycle, the seat is returned and can be reassigned to another user.
  • If SSO is enabled, you must also remove the user from your identity provider (IdP). Otherwise, the user is automatically added back to the organization the next time they try to sign in.

Members and Seat Billing

When a new member joins the organization, they are added with the default role:
  • An Admin or Member will immediately occupy a seat. For seat pricing, please refer to the Plans & Pricing.
  • When adding a new seat during a billing cycle, you will be charged on a prorated basis for the remainder of the cycle. If the seat includes Credits (Teams plan), the included Credits will also be allocated proportionally.
Teams plan only: If you are using an organization created via redemption code mode, the seat calculation rules are as follows:
  • An administrator or member will immediately occupy a seat, which will automatically consume the seat-month credit from the organization's balance.
  • The billing method for new members can be selected manually by the organization administrator. Two modes are available: Prorated by Remaining Cycle Time and Full Cycle Deduction. The default is Prorated by Remaining Cycle Time.
Organization administrators can go to Organization Settings > Advanced Settings > Usage Management > New Member Billing Method to set how seat-months are deducted and how resource quotas are allocated when new members join.The rules of the two billing methods are compared below (using a mid-month join as an example):
Billing MethodSeat-month Balance DeductionCredits Quota AllocationExample
Prorated by Remaining Cycle Time (default)The seat-month balance is deducted proportionally based on the time remaining until the cycle ends; the later a member joins, the less is deductedAllocated at the same proportion0.5 seat-month deducted, 50% Credits allocated
Full Cycle DeductionRegardless of when the member joins, 1 full seat-month is deductedThe full Credits quota for the entire cycle is allocated1 seat-month deducted, 100% Credits allocated
  • The selected billing method applies only to members who join afterwards; existing members are not affected.
  • With Full Cycle Deduction, the allocated Credits expire at the end of the organization's current unified monthly cycle and are not carried over.
Applicable to organizations that activated subscriptions via Alibaba Cloud Marketplace redemption codes. Whenever a new member is added to the organization (occupying a seat), the system calculates the number of "seat-months" to be deducted from the balance and the member's Credits quota for the current cycle according to the following rules.Since members may join mid-cycle, their balance deduction and Credits quota for the first cycle may be lower than the standard values, which will be restored to standard values in the next complete cycle.1. Core Formulas
  1. Time Ratio = Remaining hours from when user joins until cycle end ÷ Total hours in the cycle
  • Calculated to the hour, rounded to two decimal places
  1. Seat-month Balance Deduction = Time Ratio × 1 seat-month
  • Minimum deduction: 0.01 seat-month
  1. Member's Current Cycle Credits Quota = Time Ratio × Full Cycle Credits
2. Typical ScenariosUsing a 31-day billing cycle (744 hours) with 2,000 Credits per seat as an example:
Join TimeTime RatioSeat-month DeductionSeat Credits Quota
Start of Month (Day 1)~1.00 (744 hours remaining)~1.00~2000
Mid-Month (Day 15)~0.53 (396 hours remaining)~0.53~1060
End of Month (Day 29)~0.10 (72 hours remaining)~0.10~200
3. Impact of Different Month LengthsDue to different total hours in months of varying lengths, time ratios may differ by approximately 3-5%. The system calculates using actual hours, requiring no special handling.4. Summary
  • The earlier you join in a cycle, the more balance (cost) is deducted, but the more Credits the member receives for the current cycle.
  • The later you join in a cycle, the less balance (cost) is deducted, but the fewer Credits the member receives for the current cycle.
  • In the next new cycle, deductions will start from the beginning of the cycle with a time ratio of 1, so the member will receive the full Credits quota.
When a member occupying a seat is removed, any seat charges already incurred are non-refundable, and no refund is provided for the remaining time. Whether the removed member's seat can be reassigned depends on the plan. See Remove Members.
Get Started
Organization
Security
Purchase & Billing
OpenAPI
Solutions
Members and Roles - Qoder