Team Members & Access Roles
Invite colleagues to your portfolio organization and understand initiator, reviewer, and submitter permissions
On this page
Portfolio organizations support shared access for investment teams, advisors, and portfolio company engineers. Each member gets one of three roles.
Organization roles#
| Role in the UI | Who gets it | What they can do |
|---|---|---|
| Initiator | Organization creator (owner) | Full access to dashboards, audits, and settings. Only initiators can invite or remove members and create organization audits. |
| Reviewer | Colleagues invited as Reviewer | Full access to organization audits, repositories, and portfolio reports. Cannot invite or remove members. |
| Submitter | Colleagues invited as Submitter | Can connect repositories and submit them for audit. No access to portfolio dashboard analytics or executive summaries. |
CodeDD administrators retain full access across organizations for support.
Inviting members#
Only an initiator can invite people.
- Open your organization dashboard.
- Go to Invite Members (Manage Access).
- Choose Reviewer or Submitter.
- Enter up to 10 email addresses per batch and send.
Existing users receive a link to the organization dashboard. New users get a registration link; their role applies after signup.
Pending invitations show as pending until registration completes.
Removing members#
Only initiators can remove members. Initiators cannot be removed through the UI. Removed users lose organization access immediately.
Role comparison#
| Capability | Initiator | Reviewer | Submitter |
|---|---|---|---|
| View portfolio dashboards & reports | Yes | Yes | No |
| View individual audit findings | Yes | Yes | No |
| Submit / import repositories | Yes | Yes | Yes |
| Invite or remove members | Yes | No | No |
| Create organization audits | Yes | No | No |
Fund members and the fund's portfolio#
The roles above belong to one company. Separately, everyone who belongs to the fund (its admins and the members they invited under Account → Organization) is a Reviewer of every company the fund monitors under Portfolio Monitoring, without an invite. You see these companies on My Portfolio and in Portfolio Insights, open their dashboards, reports and audits, and do what a Reviewer does there.
- You do not appear in the company's member list (Manage Access), get no audit invitations or audit emails for it, and your Git connection is never used for its repositories. CVE alert emails, if you turned them on, cover these companies too.
- The access ends when you leave the fund, when the company leaves Portfolio Monitoring, or when the plan ends. A plan that ends on its date is applied within 15 minutes.
- If a company also invites you, that role is yours and stays when you leave the fund.
- Companies that another firm monitors never appear.
Being a Reviewer through the fund changes nothing about who may manage a company. Inviting people, changing a monitoring schedule and starting audits stay with fund admins and the company's initiator. Editing or deleting the fund's organization record (the accounting organization that holds the plans) is for fund admins only; a fund member still sees the organization and its details.
Audit-level roles#
Organization roles are separate from audit invitation roles (inviter, invitee, auditor) used when a specific audit is shared directly. For group audits, initiators act on the auditor side; reviewers and submitters typically participate on the invitee side for repository submission.
Need help?#
Use Reviewer for colleagues who need to read reports. Use Submitter for external engineers who should only upload code. Contact CodeDD support to transfer initiator ownership.