Set up multi-team isolation

On Business tier and above, split your organization into teams that each have their own agents, credentials, context files, and tool policies — each team's resources stay inside that team, with the license, AI providers, and audit logs shared above the team boundary.

Plus: three pasted Admin-Agent checklists — team slice recommendations against agents already built, teammate-readable scope summaries saved as future context files, and stale membership flagged before quarterly reviews slip.

Audience	Admins · Executives
Time	~10 min
Prerequisites	An Auxot account on Business or Enterprise tier. Org admin permissions. A reasonable sense of how your team is currently organized — which functions exist, which people belong to which function.
You'll end up with	One new Teams row with members and roles queued — isolation story clear on what crosses org vs stays team-only — groundwork laid before duplicating credentials and agents.

When a tutorial shows italic text in quotation marks, it usually mirrors a label or helper string inside Auxot. Product copy changes between releases — if something reads differently in your workspace, trust what you see on screen.

Callouts with a Worth knowing gold accent are meant as must-read context before you move on. Blockquotes that open with Tip are lighter, optional depth.

Why this matters

Multi-team isolation is the Business-tier feature that turns Auxot from “a shared workspace” into “an organization with departments.” Each team owns its own agents, context files, credentials, tool policies, MCP servers, and API keys (but they all sit on the same Auxot license, the same AI providers, and the same governance backbone). Each team’s resources are scoped to that team. The license, AI providers, and audit logs are shared at the org level.

If you’ve been running Auxot with a few teammates and watching things start to overlap (Marketing’s brand-voice context file attached to agents Sales doesn’t need; Legal’s compliance notes reaching general support), it’s time to split. Today, you create one team and walk through what isolation actually means: what’s shared across teams, what’s not, and how to think about the divide.

Team rows scope agents, credentials, tool policies, and context files to that team’s members. Providers and billing stay shared at the org level.

Quick start

Sign in: open Auxot in your browser and log in.
Open Teams settings: click Settings in the left menu, then Teams.
Click + New Team: top right of the Teams card.
Name and describe the team: Name (required, e.g., “Customer Support” or “Marketing”), Description (optional but recommended).
Add members: expand the new team’s row, use Add Existing User for current org users or Invite by Email for new ones. Pick a role for each: Member, Admin, or Owner.

Done? Your new team appears in the teams list with its members. From here, you’d configure the team’s own agents, context files, credentials, and tool policies (Add your first context file, Create an agent from scratch, Define a tool policy, Manage your Credentials).

The agent can do that?

Layouts are judgement calls: paste how the business actually behaves; skim proposed slices, yet Teams clicks stay yours (rename, migrate agents, tighten scopes).

1. Propose an initial slice from the agents you have today

Chat → Admin Agent:

My organization is [brief description — e.g., "30-person consulting firm doing strategy, design, and implementation work"]. We've been using Auxot as one shared workspace and now want to split into teams. What team structure would you recommend? Give me three to five teams with names, what each one does, and which existing agents would belong to each.

Why it’s non-obvious: Org-chart PDFs don’t show which agents are touching data they shouldn’t. Naming functions and pasting the roster grounds the recommendations in workloads you already have wired; you still translate the labels into literal Teams rows yourself.

2. Draft “why this lane exists” copy

Teams created: capture intent before it goes stale:

For each of these teams [paste team names], draft a two-or-three sentence "what this team does, what kinds of work belong here, and what doesn't" statement that I can save as a team-scoped context file. Make it sound like a real team would write it, not corporate.

Why it’s non-obvious: Boundaries that aren’t written down get blurry over time, and random agents accumulate without owners. Turning this output into Add your first context file material keeps onboarding honest. Tighten the voice after pasting so it reads like how the team actually talks, not a press release.

3. Review membership staleness

When rosters thicken, paste:

Look at my team structure and who's in each team. Are there people who should be on a team they're not? Are there people on teams they don't really need to be on? Are there teams with only one member that should probably be folded into another? Be specific.

Why it’s non-obvious: Team membership goes stale faster than people remember; project cohorts stay on a team after the project ends. The structured reply speeds up pruning Settings → Teams before quarterly access reviews lose their meaning.

Go deeper

What’s team-scoped vs org-scoped vs personal

Three layers of scope, and most resources can sit at any of them:

Org scope: visible to everyone in the organization. Use for company-wide things: brand voice, top-level brand context files, and the AI provider connections.
Team scope: visible only to members of that team. Use for team-specific things: that team’s agents, their internal docs context files, their own API keys, and their team-tier integrations.
Personal scope: visible only to you. Use for individual workflows.

A user can be on multiple teams simultaneously with different roles in each (Member of Engineering, Admin of an internal tools squad). Team membership is independent across teams.

Role hierarchy within a team

Member: uses the team’s agents and shared resources.
Admin: configures the team’s agents, tool policies, and context files; manages team membership.
Owner: same as Admin, plus exclusive authority over membership and role changes for the team.

Org-level roles (User vs. org Admin) are independent of team-level roles. Someone can be a regular org User and still be the Owner of a specific team. (Invite your first teammate covers the org-level hierarchy.)

What’s NOT isolated by team: AI provider connections (cloud OpenAI/Anthropic accounts you’ve added at Settings → Providers), the org-level Audit Logs (org admins still see everything), and license/billing.

Troubleshooting

“+ New Team” button is grayed out or missing. You’re on Free or Team tier (one default team only): Business+ unlocks team creation. Or your org role isn’t Admin.
A user I added to a team can’t see the team’s agents. Check that the agents themselves are scoped to that team. Adding a user to a team gives them access to team-scoped resources; agents that are personal-scoped or scoped to a different team stay invisible.
A user is on multiple teams and is confused about what they have access to. That’s expected: their access is the union of all their teams’ scopes plus any org-scoped resources. The Admin Agent can audit this for them: “What does my Auxot access look like across all my teams?”

Variations & edge cases

Inviting someone by email creates a 7-day invite link. They click, sign up, land in your org and on the team you specified. Revoke the invite from the team’s pending invites list if plans change.
Removing someone from a team doesn’t remove them from the org. They stay as an org user; they just lose that team’s resources.
Deleting a team doesn’t delete its members. Members revert to whatever org-level access they had. Team-scoped resources (the team’s agents, context files, etc.) are deleted with the team: back them up if you want them.
Free tier and Team tier: single implicit default team, no UI for creating more. The teams settings page may show a “Compare plans” upsell if you’re on these tiers.
Default team can be renamed. It exists implicitly on every account; on multi-team plans you can rename it from a generic name to something like “Operations” or “HQ.”

Walkthrough

Open Auxot in your browser and sign in. You need to be an org admin to create or delete teams.

Step 2: Open Teams settings

Click Settings in the left menu, then Teams. You’ll see your existing teams (at minimum, your default team) plus a + New Team button at the top right.

Step 3: Click + New Team

A modal appears titled New Team. The description reads: “Create a team to group users and agents.” Two fields:

Name: required. Pick something specific to the work, not the people (e.g., “Customer Support” or “Marketing,” not “Sarah’s Team”).
Description: optional but recommended. One line that says what this team handles.

Click Create. The team appears in the list.

Tip: Unsure where to slice? Run power move 1 above first: you still create each team manually afterward.

Step 4: Add members

Click the new team’s row to expand it. Three sections appear:

Members: currently empty.
Add Existing User: dropdown of users already in your org, role picker (Member / Admin / Owner), Add button.
Invite by Email: email field, role picker, generates a 7-day invite link the new user clicks to sign up and join the team.

Pick a starting role for each person: Member is fine for most; reserve Admin and Owner for people who’ll manage the team’s configuration and membership.

Tip: Same person, different teams, different roles is fine and often correct. The CTO might be a Member of Engineering (because they don’t run the day-to-day) and an Owner of the Leadership team.

Step 5: Set the team’s first context file (optional but recommended)

Once the team has members, head to Settings → Context Files and create a team-scoped context file titled “What this team does.” Use power move 2 above to draft it. Attach it to all of this team’s agents (when you build them). New people joining the team see the team’s purpose immediately reflected in agent answers.

Step 6: Build the team’s agents and tool policies

This is where the team starts doing real work. Add your first context file, Create an agent from scratch, Define a tool policy, and Manage your Credentials cover the full setup; each one supports team scoping, so when you build an agent now, set it to this team’s scope and it’ll be invisible to everyone else.

What’s next

→ Customize your Profile. How you show up in Auxot and on invites. A quick pass to make before you grow membership further.
→ Invite your first teammate. If you haven’t yet brought additional people into Auxot.
→ Create a shared Team API Key. Team API keys are how automations authenticate as a team (instead of as an individual).
→ Manage your Credentials. Credentials can be team-scoped, so each team uses its own keys.

Reference

Pages in Auxot: Settings → Teams
Tier required: Business or Enterprise (Free / Team tier = one default team only)
Team roles: Member / Admin / Owner
What’s team-scoped: agents, context files, credentials, tool policies, MCP servers, API keys, and OAuth providers
What’s org-scoped: AI provider connections, audit logs, and license/billing
Invite expiry: 7 days (revocable from pending invites list)
See also: Customize your Profile, Invite your first teammate, Create a shared Team API Key, Manage your Credentials