Members & Roles
Members & Roles manages team membership and access permissions within the current Workspace. Invite people to the Workspace and assign roles to determine which pages they can view and which actions they can perform.
Open Console > Members & Roles. Check the selected Workspace before making changes.
Members and invitations belong to the selected Workspace. Accepting an invitation grants the assigned role in that Workspace, not access to every Workspace in the organization.
Viewing and managing members, roles, and invitations are controlled by the corresponding action permissions in the current Workspace role. The Owner assignment and retention restrictions below still apply.
Members, roles, and invitations
Creating a role and assigning it are separate steps. Creating a role alone does not change member permissions; members receive its permissions when assigned that role.
| Term | Meaning |
|---|---|
| Members | User membership records for the current Workspace. Active members receive access through their assigned roles. |
| Roles | Sets of menu and action permissions. Use a built-in role or create a custom role that matches your team's responsibilities. |
| Invitations | Records inviting users to join the current Workspace. Check acceptance status and expiration time, and resend or revoke pending invitations. |
For example, to give a developer access only to specific functions, create a custom role with the required permissions, then invite the developer to the current Workspace and assign that role.
Manage members
Changing a member's role or removing a member applies only to the selected Workspace. Check the Workspace in the top selector, then open Members. Use Search name or email to find the person, and verify their name and email before continuing.
Change a member's role
Open the role settings
In the member's row, select the role-management icon under Actions to open Change role.
Choose and save the role
Select an available role, such as Admin or a custom role in this Workspace. Check the selection, then select Save role. The new role takes effect immediately in the current Workspace.
Owner cannot be assigned through Change role. Use the Workspace ownership-transfer process instead. Each Workspace must always have at least one Owner. Role changes and member removal must not leave it without an Owner.
Remove a member
Select the member
In Members, find the member in the current Workspace and select the red remove-member icon under Actions.
Confirm removal
In Remove member?, verify the member's identity, then select Remove. Their access to the current Workspace is removed immediately. Their user account is not deleted, and this action does not remove their membership in other Workspaces.
The related data is retained. API keys belong to the Workspace and are not deleted when their creator is removed as a member.
A removed member cannot rejoin this Workspace. Check the member and the selected Workspace carefully before confirming removal.
Check the member list
Return to the current Workspace's Members list. The removed member's record remains: Role shows No role, Status shows Left, and Actions shows a dash with no available actions.
Create and manage custom roles
Roles apply within the current Workspace. In Roles, built-in identifies a predefined role, while custom identifies a role created for this Workspace. The Admin card provides View to inspect its permissions; custom-role cards provide Edit, Duplicate, and Delete. A role named Developer in these examples is custom, not a predefined system role.
Create a custom role
Enter role information
Open Roles and select New custom role. Enter a Role name that is unique within the current Workspace. Add an optional Description of up to 512 characters.
Choose permissions
New custom role starts with empty permissions. Select the menus and actions the team needs.
-
View grants access to a menu.
-
Selecting another action automatically includes View for that menu and its parent menus.
-
All read-only selects view permissions; Clear clears the selection.
-
Select all and Clear all apply to their permission group.
-
Review Selected scope and Affected menus to check the resulting access.
Platform and product permissions are listed in separate groups. Choose permissions for the products and operations the team needs.
A role with no permissions can be saved. View controls access to a menu. If a member has no View permission for any page, refreshing displays Access denied. Removing View for one menu alone does not mean losing access to every page.
Create the role
Review the name, description, and permissions, then select Create role.
Manage a custom role
Return to Roles in the same Workspace to edit, duplicate, or delete a custom role as needed.
Select Edit on the custom-role card, review and update the role information and permission selections, then submit the changes.
Editing role permissions does not require changing member assignments first. Submission immediately affects all members assigned that role. Users must refresh the interface to see the updated permissions; signing in again is not required. Members with role-editing permission can also edit the custom role they themselves use, including the role named Developer in the screenshots.
Invite members
Send and review invitations
Enter email addresses and select a role
Select Invite member. Enter the invitee's email address; separate multiple email addresses with commas or spaces. Choose an available role, such as Admin or a custom role you have created.
Each invitation assigns one role. The Owner role cannot be assigned from the invitation form.
Send invitations
Check the email addresses and role, then select Send invite.
If the recipient has not accepted the invitation, invitation emails can be sent repeatedly to the same address. Invitations retains one invitation record; repeated sending does not create additional records.
If the user associated with the invited email is already a member of the current Workspace, the invitation fails. The dialog shows the reason for that email, such as “Already a member of this organization”. To change their access, find the user in Members and use Change role.
Review the invitation
Open Invitations in the selected Workspace. Filter with All statuses, or enter the full invited email in Search by full email. Check Role, Status, Expires At, and Created At. PENDING means the invitation has not yet been accepted.
Manage pending invitations
The following actions apply to PENDING invitations. Use them as needed.
Select the circular-arrow icon under Actions. The confirmation message means the resend request was submitted; it does not guarantee email delivery. Ask the recipient to check their inbox and spam folder. After resending, check Expires At for the current deadline.
Accept an invitation
The recipient receives an email identifying the organization, target Workspace, assigned role, and acceptance deadline. Open its acceptance link and follow the prompts before that deadline. The deadline in the email is shown in UTC.
The invited email address is filled in automatically for both registered and unregistered users. Unregistered users must complete registration before joining the Workspace.
After acceptance, the inviter can check that the invitation status is ACCEPTED and verify the member record in Members for the same Workspace.
Retry if acceptance fails
If the acceptance page displays “Unable to accept this invitation. Please try again.”, select Retry joining. If it still fails, contact the inviter to check the invitation in the target Workspace.
Last updated on