Every pipeline and one-off build belongs to a team.
A team is simply a conceptual owner and a separate namespace for data in Concourse (pipelines, builds, etc.). Individual user access to a team is determined by how the team is configured with
fly set-team: either by whitelisting local users or configuring external providers that are enabled for the Concourse server (see Configuring Auth Providers).
Once a user has logged into Concourse, they are authorized to perform actions against the teams that have granted them access.