Team and roles

Every user has exactly one role. Four roles belong to the TrekShield team and three belong to you.

TrekShield roles

Role	What it does
Platform Administrator	Administers the platform: users, clients, settings, integrations and the audit log
Engagement Manager	Runs engagements end to end, schedules retests, publishes reports and approves critical and high risk acceptances. Sees only engagements they are assigned to
Pentester	Tests assigned engagements, records findings and evidence, verifies fixes and runs retests
QA Reviewer	Reviews findings and reports on assigned engagements before they reach you

Your roles

Capability	Client Administrator	Client Developer	Client User
See findings	All for your company	Only those assigned to you	Engagements you belong to
See reports	Yes	No	Yes
Approve scope	Yes	No	No
Assign remediations	Yes	No	No
Work on fixes	Yes, for anyone	Your assignments	No
Accept risk	Yes	No	No
Request retests	Yes	No	No
Export lists	Yes	Yes	No
Invite and manage users	Yes	No	No

Access is scoped to your company: engagements, findings and users from other customers are not visible to you.

Invite a colleague

Open Team (Client Administrators only), go to Client Team and select Invite Member.

1. Enter an email address, a name and a role. You can assign only roles below your own, so a Client Administrator can invite Client Developers and Client Users, not other administrators. To add another administrator, ask your engagement manager.
2. Choose an engagement. Client roles are invited against an engagement that is Scheduled or later.
3. Send the invitation. It expires after 7 days. Under Invitations you can resend or cancel a pending one.

Limits: you cannot invite yourself, disposable email domains are refused, and each person can send up to 10 invitations per hour. Ask TrekShield if you need more.

Change a role or remove someone

Client Administrators can change the role of users at their company, within the same limit of roles below their own. Deactivating and reactivating accounts is done by a TrekShield Platform Administrator. Contact your engagement manager when someone leaves.

Good practice

Give people the lowest role that works. Review the Team page each quarter, and remove or downgrade accounts that are no longer needed. For account protection, see security and audit.