Docs

Users and permissions

Invite teammates and control who can manage workspace settings.

User access controls who can enter the workspace and who can manage sensitive configuration. Keep access simple and intentional.

Roles to understand

Workspace owners and admins should manage configuration-sensitive areas such as workspace settings, users, billing, object configuration, connected accounts, and feature rollout.

Members should get the access they need for daily workflows without becoming responsible for workspace structure.

Invite checklist

  1. Invite admins first

    Add the people responsible for billing, settings, users, and workspace structure.

  2. Add workflow owners

    Add owners for inbox, data, agents, and operational workflows.

  3. Invite daily users

    Add teammates who need access to conversations, records, lists, tasks, or library resources.

  4. Review permissions after setup

    Re-check access once the first workflows are configured.

Configuration-sensitive areas

Be deliberate about access to:

  • Billing and plans.
  • Workspace identity and organization settings.
  • Connected accounts and inbox mailboxes.
  • Object and list configuration.
  • Agent prompts, connections, triggers, and tools.
  • Privacy portal settings.
  • Integrations, MCP tools, and API access.

Best practices

  • Use owner or admin access only where needed.
  • Keep at least two trusted admins.
  • Review access after team changes.
  • Remove access when a teammate no longer needs workspace data.
  • Keep agent and integration ownership explicit.
Plans and credits Understand plans, credits, and usage controls. Workspace navigation Know where settings and admin surfaces live. Custom agents Review ownership for agent workflows.

Last updated