Admin
Users & roles
Invite users by email, pick a built-in role, and they receive access scoped to this workspace. Roles can be changed any time.
What you'll learn
- How to invite one or many users at once
- What each built-in role can and cannot do
- How to resend, revoke, or remove a user
- When to use built-in roles vs custom roles
Invite users
- 1
Open Users & roles
In Settings → Users & roles, click Invite users. Paste one or many email addresses, comma- or newline-separated. - 2
Pick a role
Choose Owner, Admin, Member, or Viewer. Every invitee receives the same role; you can change it per-user later. - 3
Send
Each invitee gets an email with a one-click join link. The invitation expires after 7 days — resend if needed.
Built-in roles
Owner — full access. Can manage other Owners, delete the workspace, and change billing. There is always at least one Owner.
Admin — manage everything except billing and other Owners. Can invite users, configure integrations, edit policies.
Member — create, edit, and execute agents and workflows. Cannot access workspace settings, users, billing, or destructive actions.
Viewer — read-only. Can open agents, workflows, runs, and dashboards but cannot edit or execute.
Admin — manage everything except billing and other Owners. Can invite users, configure integrations, edit policies.
Member — create, edit, and execute agents and workflows. Cannot access workspace settings, users, billing, or destructive actions.
Viewer — read-only. Can open agents, workflows, runs, and dashboards but cannot edit or execute.
Manage existing users
- 1
Change a user's role
Click the role dropdown next to the user. The change takes effect on their next request. - 2
Resend an invitation
Pending invitations show a Resend action. Use it if the invitee misplaced or never received the email. - 3
Remove a user
Open the user's row menu and click Remove. They lose access immediately. Their authored agents and workflows remain in the workspace.
Frequently asked questions
- Can a Member see billing?
- No. Billing is restricted to Owner and Admin. Members and Viewers do not see the Billing tab in the sidebar.
- What happens to a removed user's work?
- Agents, workflows, and runs they created remain. Their name is preserved in audit logs and run history. They lose all live access.
- Can one person have different roles in different workspaces?
- Yes. Role assignment is per workspace. The same account can be Owner in one workspace and Viewer in another.
- How do I downgrade myself from Owner?
- Another Owner must change your role. The system always keeps at least one Owner per workspace, so the last Owner cannot demote themselves.