Invite your team and choose roles
Bring your team into RankRight and give each person the right access. Owners run the account, editors do the work, viewers can look without touching anything.
- Four simple roles
- Invite links, no extra seats
- Two-factor sign-in
The four roles
Everyone in your organization has exactly one role. You can change it at any time.
Owner
Everything an editor can do, plus the team, billing, API keys, branding, webhooks, single sign-on and data export.
SEO editor
Adds and edits clients, runs scans, plans and completes the monthly work, writes blogs and produces reports.
Web builder
The same access as an SEO editor today. Use it for the people who build and edit client websites.
Viewer
Sees clients, dashboards and reports but can't change anything. Good for managers, partners or clients' staff.
Give people the least access they need. You can always promote someone later, and nobody needs to be an owner just to do the day-to-day SEO work.
Who can do what
The server checks the role on every action, so hiding a button is never the only protection.
| Action | Owner | SEO editor | Web builder | Viewer |
|---|---|---|---|---|
| See clients, dashboards, reports and billing status | ✓ | ✓ | ✓ | ✓ |
| Add and edit clients, run scans, plan and complete work | ✓ | ✓ | ✓ | — |
| Set up a client's WordPress and Search Console connection | ✓ | ✓ | ✓ | — |
| See client passwords and keys | ✓ | ✓ | ✓ | Hidden |
| Connect Google (Search Console and Analytics) | ✓ | ✓ | ✓ | — |
| Approve an app that connects with OAuth | ✓ | ✓ | ✓ | — |
| Invite people, change roles, remove members | ✓ | — | — | — |
| Subscribe, top up the AI allowance, cancel | ✓ | — | — | — |
| API keys, Activity log, branding, webhooks, single sign-on, data export | ✓ | — | — | — |
Two-factor, your password and your own profile are personal, so every role manages its own.
Invite a teammate
Only owners can invite. It takes about a minute, and adding people doesn't change your bill.
1 Create an invite link ~1 min
- Open Account → Team.
- Under Invite a member, type their work email.
- Pick a Role.
- Click Create invite link.
RankRight doesn't send the email for you. It shows the link so you can send it yourself, which means it never gets lost in a spam folder.
2 Send the link ~1 min
Copy the link from the green confirmation message, or later from Pending invites at the bottom of the Team page. Send it any way you like.
- The link works for 14 days.
- Inviting the same email again replaces the old link.
- Changed your mind? Click Revoke next to the invite.
3 Your teammate accepts ~2 min
When they open the link, RankRight checks whether they already have an account:
- New to RankRight: they choose a name and a password (at least 8 characters). The email is fixed to the one you invited.
- Already has an account: they sign in with the invited email and accept.
Either way, they land straight in your organization with the role you picked.
The invite only works for the email you typed. If they sign in with a different address, RankRight will tell them the invite is for someone else.
Change roles or remove someone
Owners manage everything from the Members table on the Team page.
- Change a role: pick a new role from the dropdown next to the person. It saves straight away.
- Remove someone: click Remove and confirm. They lose access to your organization immediately. Their account stays, so they keep access to any other organizations they belong to.
- Always keep an owner: RankRight won't remove the only owner or change their role. Promote someone else first.
- See who did what: owners can open Account → Activity for a log of every change made by each team member.
Someone leaving? Remove them on their last day, and revoke any API keys they used under Account → API keys.
✓ Turn on two-factor authentication ~2 min
Two-factor (2FA) asks for a 6-digit code from your phone each time you sign in, so a leaked password isn't enough to get in. Each person turns it on for their own account:
- Open Account and find Two-factor authentication (2FA).
- Click Set up 2FA.
- Scan the QR code with an authenticator app such as Google Authenticator, Authy or 1Password. You can also type in the key by hand.
- Enter the 6-digit code it shows and click Turn on 2FA.
To turn it off later, confirm with your password on the Account page. Forgot your password? Use Forgot password? on the sign-in page. The reset link works once, for 60 minutes.
Bigger team? Owners can let everyone sign in with Google Workspace, Microsoft or Okta instead. See single sign-on.
Questions
The things people ask most about teams and roles.
Does RankRight email the invite for me?
How long does an invite link last?
What is the difference between SEO editor and web builder?
Can a viewer change anything?
Can I remove myself or the last owner?
I lost my phone with my authenticator app. What now?
Can one person belong to more than one organization?
Keep going
Guides that pair well with this one.
Single sign-on with Google, Microsoft or Okta
Let your team sign in with your company identity provider. Set up OpenID Connect or SAML 2.0 for Google Workspace, Microsoft Entra ID, Okta and others.
Read the guide → 5 minBilling, seats and your AI allowance
How RankRight pricing works: Base & Audit, per-website seats, the shared monthly AI allowance, top-ups, and what happens when the allowance runs out.
Read the guide → 15 minGetting started: your first client in 15 minutes
Add your first client or run an audit, see what to fix next, plan the month and send your first report. The whole RankRight loop, step by step.
Read the guide →