Team Members
Team Members functionality is available for Tablen Team plan subscribers, enabling collaborative database management with role-based access control.
Team Roles
| Role | Description | Permissions |
|---|---|---|
| Owner | Team creator and administrator | Full access to all features, team management, billing |
| Admin | Team administrator | Full feature access, member management, no billing |
| Editor | Team contributor | Execute queries, modify data, export data, no member management |
| Viewer | Read-only team member | View data only, no modifications, no exports |
Role Permissions Matrix
| Permission | Owner | Admin | Editor | Viewer |
|---|---|---|---|---|
| Execute Queries | Yes | Yes | Yes | No |
| Modify Data | Yes | Yes | Yes | No |
| Export Data | Yes | Yes | Yes | No |
| Manage Members | Yes | Yes | No | No |
| Manage Billing | Yes | No | No | No |
| Share Connections | Yes | Yes | Yes | No |
| Approve Queries | Yes | Yes | No | No |
| Configure Rules | Yes | Yes | No | No |
Team Management
Viewing Team Members
- Go to Settings > Account
- View your team name and current members
- See each member's role, name, and email
Inviting Members
- Go to Settings > Account > Team Members
- Click "Invite Member"
- Enter the email address
- Select a role for the new member
- The invitation is sent
Changing Roles
- Find the member in the Team Members list
- Change their role using the role selector
- The change takes effect immediately
Removing Members
- Find the member in the Team Members list
- Click "Remove"
- Confirm the removal
- The member loses access to team features
Seat Management
Team plans have a limited number of seats:
- Total Seats: Defined by your subscription
- Used Seats: Number of currently active members
- Seat information is displayed in Settings > Account
- Adding members beyond the seat limit requires upgrading
Role Verification
Tablen verifies user roles before sensitive operations:
- Write queries trigger a server-side role check via
verifyWriteAccess() - If the server is unreachable, the cached role is used
- Role changes by an admin take effect on the next session refresh
Shared Connections
Team members can share connections:
- Shared connections are visible to all team members
- Password is not shared -- each member enters their own
- The connection creator remains the owner
- Shared connections show a team indicator in the sidebar
Data Masking
Team administrators can configure data masking rules:
- Define which columns should be masked for which roles
- Masking types: email, phone, credit card, custom patterns
- Column patterns support wildcards (e.g.,
*_email,credit_*) - Masking is applied based on the user's role
- Masked values replace actual data in the result table
Masking Rule Configuration
| Field | Description |
|---|---|
| Column Pattern | Column name or wildcard pattern |
| Masking Type | Type of masking to apply |
| Apply to Roles | Which roles see masked data |
| Is Active | Whether the rule is currently enabled |
Offline Behavior
When offline:
- Team features continue to work with cached data
- Role permissions use the last known role
- Shared connections remain accessible
- Data masking rules use the cached rules
- Changes sync when connectivity is restored