> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tedro.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Team and Permissions

> Invite team members, assign roles, and manage access with Tedro's organization and workspace permission system.

Tedro uses a layered permission system with roles at two levels: organization and workspace. Organization roles control who can manage billing, members, and workspaces. Workspace roles control access to specific resources like workflows, contacts, and settings within each workspace.

## Organization Roles

Organizations have three roles that determine organization-level access:

| Role       | Scope        | Capabilities                                                               |
| ---------- | ------------ | -------------------------------------------------------------------------- |
| **Owner**  | Organization | Full management, billing, automatic workspace admin. One per organization. |
| **Admin**  | Organization | Member management, automatic workspace admin on all workspaces.            |
| **Member** | Organization | No organization management. Access only to explicitly assigned workspaces. |

<Note>
  Organization owners and admins inherit workspace admin access automatically. They do not appear in the workspace member list but have full access to every workspace.
</Note>

## Workspace Roles

Each workspace has its own member list with three roles:

| Role       | Description                                                                                                                                                   |
| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Admin**  | Full read and write access to all workspace resources. Can publish workflows, manage tools, and change settings.                                              |
| **Agent**  | Can view most resources and manage conversations and contacts. Cannot publish workflows, manage tools, or access settings. Designed for support team members. |
| **Viewer** | Read-only access to most resources. Cannot access tools or settings. Designed for stakeholders who need visibility without edit access.                       |

## Permission Matrix

The following table shows the exact permissions for each workspace role across all platform resources. **RW** means read and write access. **R** means read-only. A dash means no access.

| Resource      | Admin | Agent | Viewer |
| ------------- | ----- | ----- | ------ |
| Workflows     | RW    | R     | R      |
| Templates     | RW    | R     | R      |
| Contacts      | RW    | RW    | R      |
| Conversations | RW    | RW    | R      |
| Analytics     | RW    | R     | R      |
| Agents        | RW    | R     | R      |
| Broadcasts    | RW    | R     | R      |
| Tools         | RW    | R     | —      |
| Settings      | RW    | R     | —      |

<Info>
  Agents can read and write contacts and conversations because these are core to their daily work in the inbox. All other resources are read-only for agents.
</Info>

## Inviting Team Members

### Invite to Organization

<Steps>
  ### Open Organization Members

  Go to **Settings > Organization > Members**.

  ### Send an Invitation

  Click **Invite Member**, enter the person's email address, and select an organization role (admin or member).

  ### Accept the Invitation

  The invited person receives an email with a link to accept. Once accepted, they appear in the member list.
</Steps>

### Invite to Workspace

Organization members with the "member" role need explicit workspace access:

1. Go to **Settings > Organization > Workspaces** and select a workspace
2. Add the member and assign a workspace role (admin, agent, or viewer)

<Tip>
  Organization owners and admins already have access to every workspace. You only need to add organization members to specific workspaces.
</Tip>

### Managing Invitations

The Members page shows pending invitations. You can:

* **Resend** an invitation if the recipient hasn't accepted
* **Revoke** an invitation to cancel it

## What's Next

<CardGroup cols={2}>
  <Card title="Organizations and Workspaces" icon="building" href="/platform/organizations-workspaces">
    Learn about the organization hierarchy, workspace management, and billing.
  </Card>

  <Card title="Inbox" icon="inbox" href="/platform/inbox">
    See how team roles affect inbox access and conversation assignment.
  </Card>
</CardGroup>