Team & Collaboration
Organize your team with a clear hierarchy — organizations, workspaces, and projects. Invite members, assign granular roles, manage notifications, and control every aspect of your account.
Org / Workspace / Project Hierarchy
Stellary organizes everything into three levels. Each level has its own members and roles:
The root level. Corresponds to your company, association, or personal account. Holds the subscription plan and global limits.
A subset of the organization. Typically organized by team, department, or client. Scopes AI config, agents, and custom roles.
The kanban board with its columns and cards. Contains the project members.
When you create your account, Stellary automatically generates a personal organization and a default workspace. You can start creating projects right away.
Organizations
An organization is the top-level multi-tenant container. It groups workspaces, members, and a subscription plan together. You can create as many organizations as you need.
- Create: click the organization selector in the top left, then "New organization"
- Rename / delete: in the organization settings (owners only)
- Manage members: invite people and assign roles
Each organization is tied to a subscription plan that enforces limits on workspaces, projects, members, agents, documents, automations, custom fields, and monthly AI tokens. Upgrade your plan from the organization billing settings to unlock higher limits.
Workspaces
Each organization can contain multiple workspaces. This is the level where your projects live, where the pilotage cockpit operates, and where workspace-scoped settings are configured.
- Create: from the organization settings
- Switch: use the selector in the top left to navigate between workspaces
- Settings: manage members, roles, AI configuration, agents, and custom roles
- Leave / delete: a member can leave; only the owner can delete
Invitations
Stellary uses an email-based invitation system with secure acceptance tokens. Invite members to your workspace in two ways:
- By email: enter the member's email address and choose the role they will receive
- By invite link: generate a shareable link from the workspace settings
The invitee receives an email with a link to join the workspace. If they don't have an account yet, they will be prompted to create one. The assigned role takes effect immediately upon acceptance.
Workspace Roles
Three built-in roles control what members can do inside a workspace:
Full control: member management, workspace deletion, configuration, and all permissions
Member management, resource creation, modification, and workspace configuration
Read/write access to resources they have been granted access to
Every request passes through a layered security chain: Auth Guard → Org Guard → Workspace Guard → Authorization (RBAC) → Resource. This ensures that permissions are checked at every level before any action is executed.
Pilotage Roles
In addition to their workspace role, members have a pilotage role that controls cockpit-specific access:
| Pilotage Role | View Cockpit | Approve AI Actions | Create Missions / Priorities |
|---|---|---|---|
Viewer | Yes | No | No |
Reviewer | Yes | Yes | No |
Owner | Yes | Yes | Yes |
Custom Roles & RBAC
Beyond the built-in roles, Stellary supports custom roles for fine-grained, granular role-based access control (RBAC). Custom roles are scoped to a workspace and let you define exactly which capabilities a member has.
- Create: define a new role from the workspace settings and select specific permissions
- Assign: assign the custom role to any workspace member
- Capabilities: each permission maps to a specific action — create projects, manage documents, configure agents, run automations, and more
Custom roles give you full control over who can do what, without being limited to the three built-in roles. This is especially useful for larger teams where different members need different levels of access.
Notifications
Stay up to date with everything happening in your workspaces through Stellary's in-app notification system.
- Notification bell: a bell icon in the top bar shows an unread badge when new notifications arrive
- Slide-over panel: click the bell to open a panel showing all activity chronologically
- Auto-mark as read: notifications are automatically marked as read when the panel opens
Notification events include:
- Card creation, moves, and assignments
- Comments on cards
- Document reviews
- Member changes (joins, leaves, role updates)
Account Settings
Access your personal settings from the user menu in the top right:
Profile
Edit your display name, choose your language (English or French), and manage email verification
Password
Change your current password securely
2FA Authentication
Enable or disable two-factor authentication via a TOTP authenticator app
API Tokens
Create and revoke access tokens with optional expiration dates and permission scopes
You can permanently delete your account from the settings page. This action is irreversible — all your data is permanently removed in compliance with GDPR (full cascade deletion). If you are the sole owner of an organization, you must transfer ownership before deleting your account.