Users, invitations, and roles
Open Users in the sidebar. It has three areas: All Users, Invitations, and Roles and Access.
Invite someone
- Go to Users and choose the action to add a user.
- Enter their name and email address and send the invitation.
- The invitation appears under Invitations until it is accepted.
- The recipient opens the link, sets a password, and joins the workspace.
- The person who created the workspace is the admin and also has the writer role.
- Invited users are created with the writer role by default. Add more roles after they join if they need to review, approve, or manage settings.
- Invitations expire. If someone missed theirs, send a new one from the Invitations area.
Roles and permissions
A role is a named bundle of permissions. A permission is a specific action, such as create articles, view analytics, or manage billing.
- Open Users → Roles and Access.
- Create a role, or open an existing one.
- Select the permissions the role should grant.
- Assign the role to a member. The same member can hold more than one role.
Global and team-scoped permissions
Each permission can be granted for the whole workspace or limited to a specific team.
| Scope | Effect |
|---|---|
| Global | The member can perform the action everywhere in the workspace. |
| Team-scoped | The member can perform the action only for the teams they are assigned to. |
Global role holders bypass team scoping. That means an admin does not need a separate team-scoped grant to review any team's work.
Access policies
Settings → Access Policies connects a navigation route to the permissions that protect it. If a person lacks the mapped permission, the route stays hidden or returns an access error.
- Choose the navigation area, for example Articles or Billings.
- Attach the permissions that should control it.
- Choose whether each permission is global or team-scoped.
Profile and notification settings
Personal settings are separate from workspace roles. Use the profile menu to change your name, avatar, password, and notification preferences. These changes affect only your account, not the workspace.
Remove a member
Removing a member revokes their access to the workspace. Their articles stay in the workspace, because content is owned by the workspace rather than by the person.
Tip: Grant the smallest set of permissions that lets someone do their job. It is easier to add a permission later than to trace why content was changed or published without review.