Team Management¶

Manage your privacy team, assign roles and permissions, and configure workspace access.

Team table¶

The team table shows all members of your workspace:

Invite a team member¶

1. Click Invite New Member
2. Enter the member's Name and Email (both required)
3. Select a Role from the dropdown
4. Click Send Invite

The user receives an email invitation and can create their account.

Roles¶

Available roles include:

• Business Owner — Full workspace access for the primary account holder
• Developer — Technical access for API integration, Tag Manager configuration, and webhook management
• Auditor & Regulator — Read-only access for compliance reviews and regulatory audits

Two-factor authentication¶

You can enforce 2FA for all team members from the Team & Security settings. Dxtra supports TOTP authenticator apps (Google Authenticator, Authy, etc.) and security keys (WebAuthn/FIDO2).

Managing team members¶

Disable Access¶

Temporarily disable user without deleting account:

1. Click user
2. Click Disable Access
3. User cannot log in
4. Can be re-enabled later

Remove Member¶

Permanently delete user from workspace:

1. Click user
2. Click Remove Member
3. Confirm action
4. User is deleted
5. Their requests are reassigned

Change Role¶

Update user's role and permissions:

1. Click user
2. Click Edit Role
3. Select new role or customize permissions
4. Click Save

Changes take effect immediately.

Audit & Activity¶

User Activity¶

See what each user has done:

• Requests they created/completed
• Documents they modified
• Actions taken and dates
• Login history

Workspace Activity¶

See all workspace activity:

• DSRR activity
• Document changes
• Team member changes
• Integration updates
• Configuration changes

Export activity logs for compliance.

Security¶

Password Requirements¶

Users must use:

• Minimum 8 characters
• Mix of uppercase, lowercase, numbers, symbols
• Not previously used password
• Auto-expire every 90 days

Multi-Factor Authentication (MFA)¶

Require MFA for all users:

1. Go to Settings → Security
2. Toggle "Require MFA"
3. Users see MFA setup on next login
4. Supports TOTP (Google Authenticator, Authy, etc.)

Login Sessions¶

View active login sessions:

• Device and location
• Login time
• Last activity
• Revoke session if needed

API Keys¶

Manage API keys for each user:

• Create
• Revoke
• View permissions
• Track usage

Workspace Settings¶

General Settings¶

• Workspace name
• Logo and branding
• Timezone
• Default language

Privacy Settings¶

• Default regulation (GDPR, CCPA, etc.)
• Data retention period
• Encryption settings
• Backup frequency

Notification Settings¶

• Who gets DSRR deadline alerts
• Email preferences
• Slack/Teams integration
• Escalation rules

Integrations¶

• Connected platforms
• Sync frequency
• Data scope
• Status

Best Practices¶

1. Least Privilege — Only grant permissions needed
2. Regular Review — Audit team access quarterly
3. Remove Inactive Users — Delete unused accounts
4. Document Decisions — Keep records of access changes
5. Secure Passwords — Require strong passwords and MFA
6. Activity Monitoring — Review activity logs regularly