Members

Roster, seats, and filters

The sortable roster shows name (avatar and email), permission, department, status, date joined, and (when you manage members) trailing actions. Date joined is blank (—) for invitation sent rows. In the department column, owners always read as Management regardless of stored values.

Search and the Filters menu (permission—including owner—status, and the full department list such as sales, engineering, HR, and operations) only appear once you have at least one row or you have typed a search or applied a filter; otherwise the compact empty state still offers Add team member when you have rights. Filter badges clear per chip or all at once. Pagination and rows per page behave like other tables.

The header reads your subscription seat cap (plan-dependent limits). You see current count vs limit; when the roster is full, Add is replaced by an upgrade shortcut to Settings → Subscription instead of inviting past the cap.

Member profile dialog

With manage members, click a row to open the large profile dialog. Admin/editor/viewer accounts cannot open a teammate who is owner—only another owner can. Everyone without manage rights still sees the table but gets a denial toast on row click. The dialog uses apps—Info, Address, Social, Skills, Documents, and App access—with a mobile dropdown and desktop app buttons.

Edits auto-save on a short debounce while Save status shows progress; a non-empty first name is required before writes run. Bio uses the same rich-text editor pattern as elsewhere. Documents can be uploaded, opened in a new tab, or downloaded when a file URL exists.

In Info, permission is a read-only owner badge or a select for admin / editor / viewer (with an info popover that mirrors the summaries below). Status is fixed for pending invites and owners; for everyone else you toggle active vs inactive. Inactive members lose edit, delete, and management capability in the app until you activate them again; marking inactive clears stored app access, and re-activating an editor/viewer can repopulate default visibility when their list was empty.

What each permission can do

Capabilities come from the member’s role plus their active/inactive status. The in-app info popover next to Permission is the quick version; the server enforces the same rules for saves and deletes.

Owner — Can manage members (invite, profile, remove where allowed), edit all workspace data, delete broadly, and access billing / subscription-style actions that are restricted to the account owner. Only another owner can open an owner’s profile from the roster.

Admin — Can manage members and create, edit, and delete data like an owner for day-to-day work, but does not receive billing-only permission (for example changing subscription or payment ownership stays with the owner).

Editor — Can create and edit operational records, and delete in places where the item is treated as theirs (for example content they created). Many company-wide or sensitive deletes—such as removing certain financial records—stay limited to owner/admin. Editors cannot manage the member list or roles.

Viewer — Read-only: lists and detail screens load, but buttons that change data, send team chat, or manage people stay disabled or show read-only tooltips.

App access (sidebar and apps)

The App access app controls which main areas of the product appear for that person. Help is always reachable and is not listed here. Every other area is driven by a stored visibility list, except owners, who always have full access and see disabled, checked boxes with a note that owners cannot be restricted.

When the list is stored as empty / full access (internally null), the member may open every configurable app and all of its sub-tabs. Otherwise you choose Dashboard, Audience, Products, Pages, Finances, Team, Done-for-you, and/or Settings, each of which can expose nested tabs (for example Audience → Contacts vs Conversations vs Content creation, or Settings → Subscription vs Taxes). Ticking the parent app turns on all of its tabs; if you need a narrower scope, turn the parent off and tick only the sub-tabs that should show.

On invite, choosing admin or viewer/editor resets the default visibility for that role: admin starts from full access; editor and viewer start from a preset that includes the operational apps (Dashboard, Audience, Products, Pages, Finances, Team, Done-for-you) but not Settings—you can widen access afterward on App access if they should manage company, billing, or integrations. Inactive clears the list until you fix status and visibility again.

Inviting someone new

Add team member opens the same tabbed layout: collect Info (you invite as admin, editor, or viewer only—owners are not created through this path), optional App access, Address (including emergency contact), Social, Skills, and Documents before submit.

Submission checks first name, last name, and a valid email, and you must confirm the billing / seat charge acknowledgment. The app creates the invitation token, builds the invite link, and sends mail through your workspace app SMTP connection; if the message fails you still get an error toast even though the invite may exist—fix mail under Settings and retry or share the link manually if needed.

Row shortcuts

From the table, managers can change permission inline for non-owners without opening the profile. When at least two active members exist, other active users get a message icon that routes to Team → Conversations with `dm` set so their DM opens.

The history icon opens per-member activity (paged load more, CSV export); it is disabled for pending invites. Delete is unavailable for the workspace owner and for your own account; you can still remove a pending invitation from the roster when policy allows—follow on-screen tooltips.