Manage users and access

Open Settings → Users at the scope whose access you want to manage.

Invite someone to the organization

Choose Invite user in organization settings. Enter their email, choose an Organization role, and choose an optional Access profile. Review both before sending the invitation.

The form distinguishes new users, who receive an invitation, from existing members, who are added immediately.

Add an existing member to a workspace or project

Choose Add user in that scope’s settings. Enter the existing member’s exact email and choose an Access profile.

The Source column shows inherited access, such as Inherited from org. To change inherited access, manage the assignment at its source.

Access profiles

An organization role and an access profile are separate choices. Profiles control actions at the assigned scope. The comparison below comes from the permission catalog.

Profile	Build agents	Publish agents	Take over chats	Read conversations	Export conversations	Manage users	View spend
Admin	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Developer	Yes	No	No	Yes	No	No	Yes
Operator	No	No	Yes	Yes	Yes	No	Yes
Viewer	No	No	No	Yes	No	No	Yes
Client admin	No	No	No	Yes	Yes	No	No

This table compares common actions. An inherited assignment can add access beyond the profile assigned here.

Choose the smallest profile that covers the person’s work. Review conversation and export permissions when the scope contains customer data.