Skip to content

Roles and Access

Roles control who can manage workspace membership and other sensitive account actions. This page explains the launch-safe role expectations in Members.

Where to go

Go to Settings -> Members.

Role basics

LeadBox currently uses these roles:

  • owner
  • admin
  • member

Pending invites are separate from accepted members, so customers should not treat an invite as completed access until it has been accepted.

What owners can do

Owners have the broadest membership control.

At launch, owners can:

  • invite admin or member
  • change roles for non-owner members
  • deactivate members
  • reactivate members
  • remove members
  • manage pending invites

Owner protections also exist:

  • owners cannot remove or deactivate themselves in MVP
  • the last active owner cannot be removed, deactivated, or downgraded

What admins can do

Admins can open Members, view current members, and manage a narrower set of actions.

At launch, admins can:

  • invite member
  • manage member invites
  • deactivate member
  • reactivate member
  • remove member

Admins cannot:

  • manage owners
  • manage other admins
  • change member roles
  • invite admins

What members can do

Members cannot manage workspace membership.

They should not expect to use Members for role or invite administration.

Invite and status expectations

Pending invites remain separate from accepted members.

Two practical restrictions are easy to miss:

  • a user who is already an active workspace member should not be invited again
  • a duplicate pending invite for the same email should use resend rather than creating a second pending invite

What to keep in mind

This is a focused workspace-access surface, not a broad company directory or enterprise identity-management system.