Appearance
Roles and Access
Roles control who can manage workspace membership and other sensitive account actions. This page explains the launch-safe role expectations in Members.
Where to go
Go to Settings -> Members.
Role basics
LeadBox currently uses these roles:
owneradminmember
Pending invites are separate from accepted members, so customers should not treat an invite as completed access until it has been accepted.
What owners can do
Owners have the broadest membership control.
At launch, owners can:
- invite
adminormember - change roles for non-owner members
- deactivate members
- reactivate members
- remove members
- manage pending invites
Owner protections also exist:
- owners cannot remove or deactivate themselves in MVP
- the last active owner cannot be removed, deactivated, or downgraded
What admins can do
Admins can open Members, view current members, and manage a narrower set of actions.
At launch, admins can:
- invite
member - manage member invites
- deactivate
member - reactivate
member - remove
member
Admins cannot:
- manage owners
- manage other admins
- change member roles
- invite admins
What members can do
Members cannot manage workspace membership.
They should not expect to use Members for role or invite administration.
Invite and status expectations
Pending invites remain separate from accepted members.
Two practical restrictions are easy to miss:
- a user who is already an active workspace member should not be invited again
- a duplicate pending invite for the same email should use resend rather than creating a second pending invite
What to keep in mind
This is a focused workspace-access surface, not a broad company directory or enterprise identity-management system.