Skip to main content
Organization administrators manage people through Members at the account level and manage workspace access within each workspace.

Invite and grant access

  1. Switch to the organization and open Members or the organization management window.
  2. Invite a colleague and select a role.
  3. Wait for them to accept. A pending invitation does not grant access.
  4. Add them to other workspaces as needed. Active organization members automatically belong to the default workspace.

Who can do what

Access to usage or request metadata does not grant access to another person’s generated files, prompts, responses, or credentials. Resource permissions still apply.

Leave or remove a member

Resolve a member’s remaining keys before removing them from a workspace or organization. For services that must continue running, switch to suitable credentials and verify requests before completing removal. Leaving or suspending membership affects access and member keys. System keys belong to the workspace and do not automatically stop when their maintenance contact leaves. Reinviting someone does not restore old keys or previous workspace grants. Members cannot be removed individually from the default workspace. Owner and last-administrator protections prevent removal from leaving the organization without an administrator.

After permissions change

If access is denied, refresh the current state or contact an administrator. Switch to an authorized account to continue other work. Related: Workspaces · Member and system keys · Audit logs Last updated: 2026-10-13