> ## Documentation Index
> Fetch the complete documentation index at: https://docs-eos.fpt.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Members & roles

> Invite users, assign roles, manage groups and transfer ownership within the workspace.

**Members & roles** decides who can do what in the workspace: who creates sources, who creates KBs, who can only query. Permission to edit or delete a specific source or KB is not part of a role - It belongs to the **manager** of that source / KB.

## Screen layout

| Area | Content |
| - | - |
| Header | **Transfer ownership** and **Invite member** |
| Three tabs | Members (with count) · Roles · Groups |

## Members tab

A user table with name, email, group (department) and role. Filter by role and by group.

**1. Invite a member**

Click **Invite member**, enter the **Email** and choose a **Role** (default *Member*), then click **Invite**. The invitee uses this email to sign in to the workspace.

**2. Change a role**

Use the actions menu on the user's row to switch them to another role.

## Roles tab

| Role | Can do |
| - | - |
| Workspace owner | Full control, including plan & billing, SSO and ownership transfer |
| Admin | Members, SSO, connections and secrets, the shared metadata schema; reassign managers when someone leaves |
| Editor | Create data sources and knowledge bases. Permission to edit / delete each source is decided by its manager |
| Member | Only query KBs they have been granted access to; cannot create sources or KBs |

| Action | Workspace owner | Admin | Editor | Member |
| - | :-: | :-: | :-: | :-: |
| Create upload / sync sources | ✓ | ✓ | ✓ | — |
| Create knowledge bases | ✓ | ✓ | ✓ | — |
| Manage members & SSO | ✓ | ✓ | — | — |
| Reassign managers | ✓ | ✓ | — | — |
| View the full audit log | ✓ | ✓ | — | — |
| Billing & plan changes | ✓ | — | — | — |
| Query KBs with granted access | ✓ | ✓ | ✓ | ✓ |
| Edit / delete sources & KBs | Mgr\* | Mgr\* | Mgr\* | — |

\* Mgr = only when you are the manager of that source / KB.

## Groups tab

A list of identity groups (synced from SSO): group name, identity source, member count, default role, sync status. New group members automatically get the group's default role; if a person is in several groups, the highest role applies. The *Admin* and *Workspace owner* roles are assigned only to individuals, not through groups.

## When someone leaves

**1. Transfer ownership**

Click **Transfer ownership** to hand the sources and KBs that person manages to someone else.

**2. Remove the member**

Only delete the account after the transfer is done.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.