Cursor Team Members, Roles & Seat Types (Admin Guide)

Three roles answer one question: who can administer the team. Members and Admins both get full access to Cursor's paid features, and the difference is what they can change. Unpaid Admin is the outlier, with admin controls but no paid features.

The role question to settle first is who gets Admin, and the answer is fewer people than ask for it. Admin bundles member management, SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition., billing and analytics, so the person watching spend can also edit your SAMLSecurity Assertion Markup Language. The XML-era enterprise standard that powers single sign-on: your identity provider vouches for you to each app. Older than OIDC but still what many enterprise tools speak. Press Enter for the full definition. configuration. Cursor's role table doesn't split those powers, so on a team the only control you have is how many people hold the role.

Unpaid Admin covers the people who need the controls but not the product. It has the same admin capabilities with no product access and no seat cost, so IT and finance don't need a paid seat each. One paid member must always remain, so the last paid seat can't be converted.

A seat tier sets how much included usage someone gets, separately from their role. On The X SubscriptionThe subscription Cursor is sold through: one plan for Grok, Cursor and X, with Free, Plus, Premium, Super and Ultra tiers, per-seat Teams, a weekly included pool for Cursor models shared with Grok, and third-party models billed at API list price from prepaid credit. Press Enter for the full definition., each paid tier matches the individual plan of the same name in price and weekly usage. Cursor describes Premium as the seat for everyday coding agent users, Super for daily agent users who need more, and Ultra for power users who run several agents or Automations.

Teams created before The X SubscriptionThe subscription Cursor is sold through: one plan for Grok, Cursor and X, with Free, Plus, Premium, Super and Ultra tiers, per-seat Teams, a weekly included pool for Cursor models shared with Grok, and third-party models billed at API list price from prepaid credit. Press Enter for the full definition. keep their legacy seat types until they switch:

Seat tier is independent of role: Members and Admins can hold any tier, and one team can mix tiers. Admins change a seat from the member context menu, or from the Seat menu next to a member's name. Upgrades take effect immediately and charge the pro-rated difference. Downgrades apply at the end of the billing period. Until then the member keeps the current tier, and picking it again cancels the change.

Decide tiers from usage data rather than requests. Per dollar, Super and Ultra carry more pool than Premium (3.75 times for $100 and 12.5 times for $200, against $30), but that only helps someone who would otherwise run out of Premium. Until the dashboard shows who that is, put everyone on Premium, including the people who ask for more.

Corrections in the other direction are slower, and neither a downgrade nor a move to a Free seat lowers the current invoice. A downgrade lands at the end of the billing period. On The X SubscriptionThe subscription Cursor is sold through: one plan for Grok, Cursor and X, with Free, Plus, Premium, Super and Ultra tiers, per-seat Teams, a weekly included pool for Cursor models shared with Grok, and third-party models billed at API list price from prepaid credit. Press Enter for the full definition., a move to Free applies right away, but the paid seat it frees stays on your plan until you reduce seats in billing.

There are four ways to add people, from a one-off email invite to SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition. and domain matching, which let teammates join on their own. Which one you use depends on how much you want to manage by hand.

1. 1Send email invites: click Invite Members and enter addresses. On The X SubscriptionThe subscription Cursor is sold through: one plan for Grok, Cursor and X, with Free, Plus, Premium, Super and Ultra tiers, per-seat Teams, a weekly included pool for Cursor models shared with Grok, and third-party models billed at API list price from prepaid credit. Press Enter for the full definition., you also choose each person's role and seat.
2. 2Share an invite link from the same dialog. Revoke links regularly, and note that a link can't assign a Free seat.
3. 3Let people join through SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition.: with SAMLSecurity Assertion Markup Language. The XML-era enterprise standard that powers single sign-on: your identity provider vouches for you to each app. Older than OIDC but still what many enterprise tools speak. Press Enter for the full definition. SSO configured, users join the team when they sign in through your identity provider.
4. 4Turn on domain matching: with a verified domain, teammates can join from the dashboard without an invite.

The four methods differ in how far you trust the boundary. An email invite is explicit and slow. A shareable link is fast, has a long expiry and lets in whoever holds it, so revoke it on a schedule instead of leaving it in a Slack channel from March. SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition. and domain matching move the boundary to your identity provider or your verified domain, which is where it belongs once the team passes a few dozen people.

Admins remove members from the context menu, and members can't leave a team on their own. Removal ends the person's access to the team. It doesn't delete their Cursor account or the data attached to that account. Deleting an entire team is different: Cursor permanently deletes all of the team's associated data.

Older guides say removal permanently deletes a member's Memories and Cloud Agent data, and Cursor's current members page says it doesn't. Billing after a removal is where Cursor's pages differ. The members page says a member who used any credits keeps the seat occupied until the billing period ends, and that removals come back as pro-rated credit on the next invoice. The team pricing page and The X SubscriptionThe subscription Cursor is sold through: one plan for Grok, Cursor and X, with Free, Plus, Premium, Super and Ultra tiers, per-seat Teams, a weekly included pool for Cursor models shared with Grok, and third-party models billed at API list price from prepaid credit. Press Enter for the full definition. docs say the seat stays on your plan for whoever joins next until you reduce seats in billing, effective at the end of the period, and they mention no credit.

Domain matching and invite restrictions are for teams that manage membership inside Cursor. Domain matching lets anyone with a verified, matching email domain join without an invite. Restrict invites to verified domains blocks invitations to addresses outside your domains. Both need at least one verified domain, and both are available on Teams and Enterprise only to teams that don't use SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition.. With SCIM, membership comes from your identity provider instead.

SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition. doesn't carry roles by itself. Cursor's SCIM docs say roles are configured in Cursor, so with team-level SCIM, admins still set them in the dashboard. On an Enterprise Organization, you can drive roles from the directory: sync a directory group into an Organization Group and map that group to the team with a role. Once a mapping carries a role, sync manages roles on that team and admins can no longer change them in the dashboard. Roles stay editable only where the mapping has no role.

Whichever route you take, keep more than one admin. A team must always have one, and if your only admin leaves, Cursor's help center says recovering admin access means contacting support.