Why teams matter
A Magento agency typically operates ten-plus Adobe Commerce Cloud customer projects in a single DryRunPro tenancy. Each customer has their own engineering crew (the agency’s internal team plus, sometimes, the customer’s own engineers). If you grant access on a per-project basis, the per-user permission matrix becomes unmanageable. If you grant access tenancy-wide, every engineer can see every customer’s data, which is unacceptable for confidentiality reasons. Teams resolve the tension. Each team is a named group (“Cakebox”, “Blitz”, “BDFC”). Each team gets a list of member users. Each project gets a team assignment on its card. A user has effective access to a project if they are a member of any team assigned to that project (or directly assigned to the project on the Project Users record). The result: you bring on a new engineer, you add them to the relevant team, and they immediately see all projects that team is assigned to without further per-project clicks. You off-board an engineer, you remove them from the team, and they lose access to all those projects at once.What you see when you land here
The page header is a green Add Organization button (top-left), then Organization List in bold, then a control strip with “Show / entries” pagination, Select all, Deselect all, Columns toggle, Delete selected, and a Search field on the right. Below the controls, a single table:| Column | What it shows |
|---|---|
| ID | The integer team ID. Sortable. |
| Name | The team’s display name (e.g. “Cakebox”, “Blitz”, “BDFC”). |
| Owner | The user who created or owns the team (e.g. “Alex S”). |
| Action | Three buttons: green View, blue Edit, red Delete. |
| ID | Name | Owner | Action |
|---|---|---|---|
| 3 | BDFC | Alex S | View / Edit / Delete |
| 2 | Cakebox | Alex S | View / Edit / Delete |
| 1 | Blitz | Alex S | View / Edit / Delete |
Creating a team
Click the green Add Organization button at the top. The Add Organization dialog asks for:- Name, the human-readable team name. Best practice is to name after the customer or customer group (e.g. “Cakebox”, “Soak and Sleep”, “Krispy Kreme”).
- Owner, picked from the Project Users roster. The owner is the user who is responsible for the team. They get implicit edit rights on the team itself.
- Members, multi-select from the user roster.
- Description (optional), a short note about the team’s purpose.
Adding users to a team
Two ways:- From the team’s Edit dialog, click Edit on the row, scroll to Members, multi-select the users, save.
- From a user’s Edit dialog, click Edit on the user in Project Users, scroll to Teams, multi-select the teams, save.
Assigning a team to a project
This is the operation that gates project access. Two paths:- From the project card on the Projects tab, the Team dropdown at the bottom of the card. Pick the team and the assignment is committed instantly.
- From the Project Overview page, the Assigned Team dropdown in the Project Details panel, then click the Assign Team button.
- Move all engineers into a single combined team.
- Use direct per-user project assignment via Project Users Edit dialog (rare, but supported).
Effective access calculation
When DryRunPro evaluates whether a user can see a project, it walks this logic:- Is the user an Admin? Yes → access granted.
- Is the user directly assigned to the project on the Project Users record? Yes → access granted.
- Is the user a member of any team that is assigned to the project? Yes → access granted.
- Otherwise → access denied.
Editing and deleting a team
Click the blue Edit action on a row to:- Rename the team.
- Change the owner.
- Add or remove members.
- Edit the description.
- The team’s members are not affected as users; only their team membership is dropped.
- Projects that were assigned to the team revert to “No team”.
- The audit log records the deletion with deleter, timestamp, and previous member roster.
Renaming a team
Renaming is supported via Edit. The new name appears immediately on every project card that the team is assigned to (the dropdown selection is preserved by team ID, not name). If you rename a team that has been referenced in saved User Alert filters, the alerts continue to work because they bind to ID, not name. The display label updates on the next page load.Audit and compliance
Every team operation is recorded in the platform audit log:- Team created (by, when).
- Member added / removed.
- Owner changed.
- Project assigned / unassigned to team.
- Team renamed.
- Team deleted.
Team naming conventions
The screenshots from the live agency tenancy follow these conventions, which we recommend:- Customer-first names, named after the customer brand (Cakebox, Blitz, BDFC) so that anyone scanning the project list immediately understands who the team is for.
- Short, three to ten characters, for legibility in the dropdown on the project card.
- No prefixes (avoid “Customer-Cakebox” or “Team Cakebox”). The team’s role is implicit from being on this page.
- One team per customer or customer group, even if you have to rename later. Easier to manage than per-project teams.
Cross-links
- Project Users, where users are added to teams from the user side.
- Roles, the role layer that gates actions independently of team-based project visibility.
- Permissions, the underlying permission slugs.
- Projects, the team dropdown on project cards.
- Project Overview, the Assigned Team dropdown.