Teams
Manage groups of users with role-based access to workspaces & bases
Overview
Teams let you group existing workspace members, so you can assign and manage permissions at scale. Instead of configuring the same role for each person on every base, add users to a team and grant that team a role on one or more bases.
Teams help you to
- Organize members by department, project, or function
- Manage permissions efficiently by assigning roles to teams instead of individuals
- Scale access control without managing individual user permissions
- Maintain flexibility with inheritance and override capabilities
- Create sub-teams for more granular organization with up to 4 levels of nesting
Create Team
- Navigate to Workspace Settings > Teams tab.
- Click New Team.
- Enter a team name (Optional).
- Click Create Team.

When a team is created, the creator is automatically added as its first member and designated as the Team Owner. Team Owners have full administrative privileges, including adding or removing members, renaming the team, and deleting it when necessary. Multiple owners can be assigned to a team, but each team must always have at least one owner.
Add Members to a Team
In the Teams tab, select the team you want to manage, then follow these steps:
- Click Add Members.
- Use the toggle buttons to select existing workspace members to add. Members already part of the team are clearly indicated.
- Click Add Members again to confirm your selection.
You can search by name or email to quickly locate users. Existing team members have their toggles disabled to avoid duplicate additions. Each member's workspace role is displayed beside their name for better context.

Remove Members from a Team
In the Teams tab, select the team you want to manage, then follow these steps:
- Locate the member you want to remove. Use the search bar if needed and open the Actions (three dots) menu beside their name.
- Select Remove Member.
- Confirm the action when prompted.

To remove multiple members at once:
- Use the checkboxes to select the members you want to remove.
- Click Actions > Remove from Team at the top of the member list.
- Confirm the action when prompted.

Manage Team Owners
A team can have multiple owners, but it must always have at least one.
To add or remove team owners:
- In the Teams tab, select the team you want to manage.
- Locate the member whose ownership status you want to change. Use the search bar if necessary and open the Actions (three dots) menu beside their name.
- To grant ownership, select Assign as Team Owner. To revoke ownership, select Remove as Team Owner.

Leave Team
Members can leave a team on their own if they no longer wish to be part of it (any team member can leave, not just owners — as long as at least one owner remains).
To leave a team you are a member of:
- In the Teams tab, open team context menu by clicking the Actions (three dots) button beside the team name.
- Click the Leave Team button from the dropdown menu.
- Confirm the action when prompted.

Rename Team
In the Teams tab, select the team you want to rename. Edit team name as needed, and your changes will be saved automatically.

Delete Team
To delete a team:
- In the Teams tab, open team context menu by clicking the Actions (three dots) button beside the team name.
- Click the Delete Team button from the dropdown menu.
- Confirm the action when prompted.

Sub-teams
You can create teams within teams to match how your company is organized. For example, an "Engineering" team can have "Frontend" and "Backend" as sub-teams.
Sub-teams can be nested up to 4 levels deep.
Engineering
├── Frontend
│ └── Design System
│ └── Icons ← maximum depth
└── Backend
Create a sub-team
- In the Teams tab, click the Actions (three dots) menu next to the parent team.
- Select Create Sub-team.
- Enter a name for the sub-team.
- Click Create Team.

Alternatively, click New Team and select a parent team from the Parent team dropdown. Enter a name for the team and click Create Team.

Move a team
You can move a team under a different parent, or make it a top-level team.
- In the Teams tab, click the Actions (three dots) menu next to the team.
- Select Move Team.
- Pick the new parent team, or choose no parent to make it top-level.
- Confirm the move.

Members in sub-teams
Adding someone to a parent team does not automatically add them to its sub-teams. You manage each team's members separately.
When you open a team's details, you'll see:
- Direct members — people you added to this team
- Inherited members — people from parent teams above, shown for reference with a label indicating which team they belong to

How sub-teams affect permissions
| What | Direction | How it works |
|---|---|---|
| Workspace & base roles | Upward | Parent team members automatically get their sub-team's roles |
| Table, record & field permissions | Downward | Sub-team members are included by default; you can switch to "This team only" |
Sub-teams change how permissions work in two ways:
1. Workspace & base roles flow upward
When you give a sub-team a role on a workspace or base, members of the parent team also get that role automatically. This way, managers in the parent team can always see what their sub-teams have access to.
Example: The "Frontend" sub-team has Editor access to Workspace X.
| Person | Team | Access to Workspace X |
|---|---|---|
| Alice | Frontend | Editor |
| Bob | Engineering (parent of Frontend) | Editor — gets it automatically |
| Carol | Backend (sibling, not parent) | No access |
2. Table, record & field permissions flow downward
When you grant a team access using "Specific users or teams" in table visibility, record permissions, or field permissions, you can choose whether to include sub-team members or not.
After selecting a team, you'll see a segmented control next to the team name with two options:
| Option | Who gets access |
|---|---|
| This team | Only direct members of this team |
| + Sub-teams (default) | Members of this team and all sub-teams below it |

Example: The "Infrastructure" table is visible to the "Engineering" team.
With "Include sub-teams" (default):
| Person | Team | Can see "Infrastructure"? |
|---|---|---|
| Alice | Engineering | Yes |
| Bob | Frontend (sub-team) | Yes |
| Carol | Design System (sub-sub-team) | Yes |
| Dave | Marketing | No |
With "This team only":
| Person | Team | Can see "Infrastructure"? |
|---|---|---|
| Alice | Engineering | Yes |
| Bob | Frontend (sub-team) | No |
| Carol | Design System (sub-sub-team) | No |
This toggle is available wherever you see the "Specific users or teams" option:
- Table visibility — who can see a table
- Record permissions — who can create or delete records
- Field permissions — who can edit a field
Team roles
Every team member is either an Owner or a Member.
| Role | What they can do |
|---|---|
| Owner | Manage the team — rename, move, delete, add/remove people, create sub-teams |
| Member | Be part of the team and receive the workspace/base roles assigned to it |
- The person who creates a team is automatically its first Owner.
- A team can have multiple Owners but must always have at least one.
- Team roles (Owner/Member) are separate from workspace and base roles (Creator, Editor, Viewer, etc.).
Assign roles to teams
You can give a team a role at the workspace or base level, just like you do for individual users. When a team gets a role, all its members receive that access.
Available roles for teams:
- Creator — full control except deletion
- Editor — add, edit, and delete records
- Commenter — view and comment on records
- Viewer — read-only access
- No Access — block access entirely
For step-by-step instructions:
Effective role resolution
When someone belongs to one or more teams and has an individual role, NocoDB picks the one that applies using this order:
For a base
| Priority | Where the role comes from |
|---|---|
| 1 (highest) | Role assigned directly to the user on this base |
| 2 | Highest role from any team assigned to this base |
| 3 | Role assigned directly to the user on the workspace |
| 4 | Highest role from any team assigned to the workspace |
| 5 (lowest) | No access |
For a workspace
| Priority | Where the role comes from |
|---|---|
| 1 (highest) | Role assigned directly to the user on the workspace |
| 2 | Highest role from any team assigned to the workspace |
| 3 (lowest) | No access |
Rules to remember
- Individual roles always win over team roles at the same level.
- Base-level roles win over workspace-level roles — a role set on a specific base takes priority.
- Highest team role wins — if you're in two teams with different roles, you get the higher one. For example, Viewer + Editor = Editor.
- "Inherit" at workspace level means "use my team role." Any other workspace role overrides team roles.
- "No Access" at workspace level blocks everything — even team roles can't override it.
Examples
Team role only
Alice is in the "Marketing" team, which has Editor access on Workspace X. Alice has no individual role.
→ Alice gets Editor access on the workspace and all its bases.
Individual role overrides team
Bob is in "Marketing" (Editor on Workspace X), but Bob is also individually set as Viewer on Workspace X.
→ Bob gets Viewer — individual roles always take priority, even if less permissive.
Multiple teams
Carol is in "Marketing" (Viewer on Base A) and "Content" (Editor on Base A).
→ Carol gets Editor on Base A — the higher team role wins.
Base-level override
Dave is in "Engineering" (Editor on Workspace X). He's also individually set as Creator on Base B.
→ Dave gets Creator on Base B, Editor on all other bases.
Sub-team role flowing upward
"Frontend" is a sub-team of "Engineering." "Frontend" has Editor on Workspace X.
→ Frontend members get Editor. → Engineering members also get Editor — parent team members automatically receive sub-team roles.
Best practices
- Invite users with the "Inherit" role at workspace level. This lets their access be fully controlled through teams. (Note: "No Access" at workspace level blocks all team roles.)
- Match your org chart — create top-level teams for departments and sub-teams for groups within them.
- Put managers in parent teams — they'll automatically get access to everything their sub-teams can see.
- Use individual roles only for exceptions — teams should handle the norm, individual assignments handle the edge cases.
- Use clear team names (e.g.,
Eng - Backend,Ops - HR) so it's easy to find and manage teams. - Review membership regularly — remove people who've left or changed roles.
- Add multiple team owners — so things don't get stuck if one owner is unavailable.