DigitalOcean Teams
DigitalOcean teams allow you to invite multiple users to access and manage shared resources (like Droplets, DigitalOcean Load Balancers, and Spaces) without sharing login credentials or billing information.
Teams are useful for project leaders and business owners who want to share control of server infrastructure with trusted collaborators, such as developers and system administrators. They’re available to anyone with a DigitalOcean account at no additional cost.
How-Tos
- How to Create Teams
- How to Deactivate Teams
Use the DigitalOcean Control Panel to create a team and share resources.
Deactivate a team to remove shared access to resources.
Team Membership
Once you’ve created a team, the team page displays profile details for your team, along with a list of members:
You can see a team member’s current Role, whether a team member has enabled two-factor authentication in the 2 FA column, and whether they have accepted your invitation to the team under the Status column.
By clicking the Actions drop-down, you can change a member’s current role or remove them from the team. To invite more members to the team, click the Invite Members button. There is no limit to the number of members a team can have or the number of members who can have a given role.
Team Roles
Once an individual has accepted an invitation to your team, they can occupy one of three roles:
Owner: Has full control over the account, including billing and team settings. Appropriate for users who need to manage both the account’s billing and team settings.
Billing: Has access to manage payment and billing information, read only access to resources, and no access to team settings. Appropriate for users who need to manage billing, but who do not manage technical resources or team membership.
Member: Does not have access to team’s billing or team settings, but can manage everything else. Appropriate for users who only require the ability to manage the team’s server infrastructure resources, such as Droplets.
Remember that the Member and Owner roles have full control over the team’s Droplets and related resources via the control panel and API, similar to a normal user.
Team Resources
Most team resources, such as Droplets and public SSH keys, are viewable by all members of a team account. However, there are a few types of resources that are specific to particular members:
- Personal access tokens are unique to the member that generated it.
- Droplet password emails are sent to the member that created the related Droplet.
- Support ticket emails are sent to any member that participated in a particular support ticket.
All other account resources can be viewed or managed by every member of a team, depending on their role, including Droplets, public SSH keys, images, developer applications and authorized applications (API), support tickets, referral codes, and security history.
Billing and Security
Team owners and billers can manage the billing settings on the Billing tab. Billing emails are sent to email addresses belonging to the Team Owner and Billing Role member.
The Security tab displays SSH keys and security history, which includes Droplet and team management events with the IP address of the user that triggered the event and a timestamp (GMT).