Guardrail Ledger documentation

Team and roles

People sign in with their Spot Suite account. Their Spot Suite role in the workspace decides what they can change.

RoleCan do
Owner or adminChange the gate, mint and revoke ingest tokens, share the Azure DevOps extension and record exceptions.
MemberRead findings, exceptions, the gate settings, ingest tokens and the Azure DevOps organisations. Changes are refused.

Adding people

Invite people in your Spot Suite account. They sign in to Guardrail Ledger the same way as everyone else. Exception owners are picked from the workspace members.

The approver of an exception is always the admin who records it, and the owner must be someone else.