Skip to main content
Access works on two levels: an organization role that everyone on your team has, and a workspace role that applies within a single workspace. For how the two levels fit together, see Organizations and Workspaces.
On the Free plan you can only invite Owners; paid plans let you invite Owners, Admins, and Members. Data-level permissions are only enforced on Growth and Custom. On Starter, every Member can access all data.

​
Organization roles

Every person belongs to the organization with one of these roles, managed in Organization settings → Members.

​
Workspace roles

Within a workspace, each person is either an Admin or a Member, managed in the workspace’s Members settings.
Organization Owners and Admins are Admins on every workspace automatically. Only organization Members receive a per-workspace role, and only on the workspaces they are added to.
Only admins can add members to a workspace, change workspace roles, create Groups, and manage workspace settings. Members cannot create layers or see layers they do not have permission to access. To add people and assign roles, use the Members area in organization and workspace settings. For the invite flow, see Invite team members.

​
API & MCP

Platform API

Invite, list, and revoke members through the invitations endpoints.

MCP tools

No dedicated member tool yet.