Team, roles and audit

Roles

• Owner: everything, including the plan and making others Owner
• Admin: manages connections, members, table design and the sample data
• Editor: edits data, runs SQL that changes data, builds and runs pipelines
• Viewer: views data and results only

Audit Log

Every change to data, structure, connections and members is recorded: who did what and when, with the old and new values. Filter by category and time range.

API

Create API keys in the API menu to call Ruamhub from other systems (depending on your plan). The API reference is on the same page.

SSO (Pro plan)

An Owner or Admin sets it up in Settings › SSO: the OpenID Connect issuer URL, client ID, client secret (kept in Vault), allowed email domains and the default role for first-time sign-ins. Give your provider the redirect URI shown on the Settings page.

Members press "Sign in with SSO" and enter their work email. People without an account whose email is in an allowed domain get one automatically. Turn on "Require SSO" and members (except Owners) can no longer sign in with a password. An SSO session works only in its own workspace.

Plans and payment

The Owner changes the plan in Settings and pays through Stripe by card (charged automatically) or PromptPay (an invoice to pay within 7 days). Upgrades apply at once; downgrades and cancellations at the end of the period. Receipts, card changes and cancelling are under "Manage billing".