Team, roles & invitations
Invite people with the access they need and manage membership.
On this page
Roles
| Role | Intended access |
|---|---|
| Owner | Workspace ownership and protected owner operations |
| Admin | Site/workspace administration and permitted management |
| Member | Collaboration, including permitted goal and funnel changes |
| Viewer | Read authorized reports |
Specific operations can require additional checks; use the tool descriptions or the authenticated form for the exact requirement. A role does not bypass credential write consent.
Invite a teammate
Open Settings → Team, enter the email, choose the intended role and send the invitation. Invitation links expire after seven days. Email delivery must be configured; a failed or simulated send does not establish a valid delivered invitation.
Resend or revoke
Resending issues a fresh link and invalidates the previous link. Revoke an invitation when no longer needed. Pending tokens are not exposed in invitation lists. Avoid duplicate invitations; manage the existing pending one instead.
Change or remove membership
An administrator can manage other non-owner members according to the protected flow. The tools do not let you remove yourself or change your own role. Owners need the authenticated ownership-transfer flow before removal. Access checks use current membership, including connected agents.
API equivalents
list_members, update_member_role, remove_member, list_invitations, invite_member, resend_invitation and revoke_invitation are all in the tool reference. Invitation tools send email: agents should only use them for an explicitly requested invitation.
Still looking for an answer? Try troubleshooting or get in touch.