Skip to content

Roles and Access ​

Roles control who can manage workspace membership and other sensitive account actions. This page explains the launch-safe role expectations in Members.

Where to go ​

Go to Settings -> Members.

Role basics ​

LeadBox currently uses these roles:

  • owner
  • admin
  • member

Pending invites are separate from accepted members, so customers should not treat an invite as completed access until it has been accepted.

What owners can do ​

Owners have the broadest membership control.

At launch, owners can:

  • invite admin or member
  • change roles for non-owner members
  • deactivate members
  • reactivate members
  • remove members
  • manage pending invites

Owner protections also exist:

  • owners cannot remove or deactivate themselves in MVP
  • the last active owner cannot be removed, deactivated, or downgraded

What admins can do ​

Admins can open Members, view current members, and manage a narrower set of actions.

At launch, admins can:

  • invite member
  • manage member invites
  • deactivate member
  • reactivate member
  • remove member

Admins cannot:

  • manage owners
  • manage other admins
  • change member roles
  • invite admins

What members can do ​

Members cannot manage workspace membership.

They should not expect to use Members for role or invite administration.

Invite and status expectations ​

Pending invites remain separate from accepted members.

Two practical restrictions are easy to miss:

  • a user who is already an active workspace member should not be invited again
  • a duplicate pending invite for the same email should use resend rather than creating a second pending invite

What to keep in mind ​

This is a focused workspace-access surface, not a broad company directory or enterprise identity-management system.