Teams are the primary unit of user organization in a Quiverstone subscription. Every team has a type (Documentation Index
Fetch the complete documentation index at: https://docs.quiverstone.io/llms.txt
Use this file to discover all available pages before exploring further.
ACCESS or SETTINGS) that determines what its members can do, and every team member has a role (OWNER, ADMIN, or MEMBER) that determines how they can manage the team itself.
This page explains the model, walks through creating and managing teams, and covers how invites, co-ownership, and backfill work.
Teams require a paid subscription. Free tier is a single-user workspace with no teams. See Subscriptions & Tiers for the full feature gating.
The two team types
Quiverstone separates users into two distinct roles by team type, so that the people who manage your AWS inventory are cleanly separated from the people who consume it.ACCESS teams
ACCESS teams are for consumers — people who need to view Organizations, Accounts, and Customers, and assume AWS roles, but should not be able to modify the workspace inventory.
- Available on: Consultant, Pro, Enterprise.
- Members cannot create, edit, or delete Organizations, Accounts, or Customers. The CRUD controls are hidden in the UI.
- Members can assume any AWS IAM role that has been granted to them via a Group.
- On Consultant tier, the single
ACCESSteam automatically sees every resource the owner creates. - On Pro and Enterprise,
ACCESSteams see only the resources explicitly granted to them through a Group.
SETTINGS teams
SETTINGS teams are for admins — the people who own and manage the workspace’s Organizations, Accounts, Customers, Roles, and Groups.
- Available on: Pro, Enterprise. Not available on Consultant.
- Members can create, edit, and delete Organizations, Accounts, Customers, Roles, and Groups.
- Automatic co-ownership: when any
SETTINGSmember creates a resource, every other currentSETTINGSmember immediately becomes a co-owner with full edit and delete rights. There is no manual sharing step. - A
SETTINGSteamOWNERcan manage any team in the subscription, not just their own. SETTINGSmembers are the only people who can create and edit Groups to share resources withACCESSteams.
Team roles: OWNER, ADMIN, MEMBER
Within a team, each member has exactly one of three roles. Team roles control how you manage the team itself — they are independent of the team type.
| Role | Who it is | What they can do |
|---|---|---|
OWNER | The subscription payer, or someone they transferred ownership to | Full control of the team: edit details, invite and remove members, promote or demote members, delete the team. |
ADMIN | A trusted lieutenant | Manage team membership: edit team details, invite new members, promote members up to ADMIN. Cannot delete the team or demote an OWNER. |
MEMBER | A regular team member | Use the resources the team grants. Cannot manage team membership. |
On Consultant tier, non-owners are locked to
MEMBER. The OWNER/ADMIN/MEMBER distinction only matters on Pro and Enterprise.OWNER. Quiverstone prevents you from demoting or removing the last remaining OWNER of a team — promote someone else first.
Creating a team
Click Create Team
The button is only available if your tier allows additional teams. On Consultant, the button is hidden once the single allowed team exists.
Pick a team type
Choose
ACCESS or SETTINGS. The SETTINGS option is hidden on Consultant tier.If you are not sure, start with
ACCESS. You can always create additional teams later.Name the team and save
Give the team a short, descriptive name (for example,
Ops, Platform Admins, Acme Contractors). You’ll use this name when referencing the team in Groups.Inviting a member
Click Invite Member
Enter the invitee’s email address. They don’t need a Quiverstone account yet — the invite flow will create one when they accept.
Wait for them to accept
The invitee receives an email invitation. Their membership sits in
PENDING state until they accept and sign in for the first time, at which point it becomes ACTIVE.Verify backfill
When the new member’s status transitions to
ACTIVE, Quiverstone automatically backfills resource visibility so they can start working immediately. See Backfill behavior below for the exact rules.Backfill behavior
When a new member becomes active, Quiverstone grants them visibility into the resources they should already be able to see — no manual sharing step required.| Team type | Tier | What the new member sees on activation |
|---|---|---|
ACCESS | Consultant | Every Organization, Account, and Customer the team owner has ever created. |
ACCESS | Pro / Enterprise | Nothing automatic. They see only the resources referenced by Groups that include them or their team. Edit or re-save an existing Group to grant access. |
SETTINGS | Pro / Enterprise | Automatic co-ownership of every resource any current SETTINGS teammate owns. |
Pro/Enterprise
ACCESS team backfill is the one case that requires action: after adding a new member, have a SETTINGS team member confirm that any Group the new member should be part of already references them (directly or via their team).Managing members
From the team detail page, a teamOWNER or ADMIN can:
- Change a member’s role — promote a
MEMBERtoADMIN, or anADMINtoOWNER(Pro/Enterprise only). - Remove a member — revokes the team’s grants from that user immediately. If the user is in multiple teams or Groups, their other access is unaffected.
- Resend an invite if a
PENDINGinvite has expired. - Delete the team (Pro/Enterprise only,
OWNERonly) — removes the team and revokes any access it was granting through Groups.
Transferring ownership
A teamOWNER can transfer ownership to another member:
- Promote the target member to
OWNER. - Once the team has two
OWNERs, demote yourself toADMINorMEMBER.
Common scenarios
“I have a small team that should all see the same AWS estate.” Consultant tier, oneACCESS team, invite everyone into it. Done.
“I want to separate my admins from my operators.”
Pro tier. Create a SETTINGS team for yourself and any other admins, then create one or more ACCESS teams for operators. Use Groups to share specific Organizations or Accounts with the ACCESS teams.
“I want a contractor to see only one Customer’s infrastructure.”
Pro or Enterprise. Create an ACCESS team for the contractor, then create a Group that includes that team and only the Organizations, Accounts, and Customer records they should see. Delete the Group when the engagement ends to revoke access.
“I want a second admin who can manage the workspace alongside me.”
Pro or Enterprise. Add them to your SETTINGS team. They’ll automatically co-own every record you’ve created, and every record they create will be co-owned by you.

