Managing members

Commercial & Enterprise

Organization admins can invite and manage organization members, manage workspace access, and assign roles for both the organization and workspace.

Organization and workspace roles

Administrative permissions for organization members are managed through roles. Roles can be assigned at the organization level and at the workspace level. At the organization level, there are two roles: Member and Admin. At the workspace level, there is an additional role, Manager, that grants workspace-level administrative permissions.

Other notes about each role include:

Member: This role is the default role for all organization members. This role is inherited through all workspaces to which the member has access, unless otherwise assigned.
Manager: This role can be assigned only at the workspace level and appears only in a workspace members list. At the organization level, workspace managers still have the member role. Workspace managers’ permissions are limited to the workspace in which they’re assigned.
Admin: This role can be assigned only at the organization level, but is inherited into all workspaces. Admins can’t be removed from shared workspaces. The first organization admin is either assigned when your organization was created or is assigned to the account that created the organization.

See the following table for a summary of roles and their administrative permissions:

The group manager role isn’t listed because group manager permissions are restricted to the group context. Group managers don’t inherit a workspace manager role in shared workspaces to which they’re added. See Managing groups for details and a list of administrative permissions specific to group management.

Administrative task	Member	Workspace manager	Admin
Access all organization workspaces.			✓
Create, manage, and delete shared workspaces, including assigning the first workspace manager.			✓
Connect, edit, and delete organization drives.			✓
Set the organization default drive.			✓
Connect, edit, and delete workspace drives in assigned workspaces.	✓	✓	All workspaces
Set the workspace default drive.			✓
Add and remove organization members, including assigning organization-level roles.			✓
Add and remove workspace members, including assigning workspace-level roles.		In their managed workspace only	All workspaces
View usage details.			✓
View and manage the organization’s subscription and billing, including invoices.			✓

Because organization admins have such wide-ranging permissions, minimize the number of admins. Instead, assign workspace managers at the workspace level and limit organization-wide administrative access to only those who need it.

Managing organization members

Admins can invite and manage the organization’s members. To add members:

In the header, click the initials icon and select Settings.
Click Members to open the organization members list.
Click Add members.
Enter the email address of the member to invite. To invite multiple members, use a comma-separated list.
Press the Enter or Return key.
Click Add members.

Invitees receive an email with a link they can click to complete sign up. Members who accept your invitation automatically join your AI Hub organization and gain access to the organization’s subscription features and shared consumption units. All new members are assigned the default Member role but you can later assign other roles with more permissions. You can add members to a workspace or group before they accept your invitation.

You can see if someone has accepted your invitation by monitoring the Status column of the members list. When a member joins your organization, their status changes from Invited to Joined. To resend an invitation or send an invitation reminder, click the Bell icon in that person’s row of the members list.

Assigning organization-level roles

Admins can assign organization-level roles, including assigning other organization admins.

In the header, click the initials icon and select Settings.
Click Members to open the organization members list.
In the member’s row, click the Edit icon.
Select a new role from the Role field.
Click Save.

You can update roles for multiple members by selecting a list of members, clicking Actions, and selecting Update roles.

Enterprise Organizations with a single-tenant environment using SAML-based single sign-on can define organization admins through their identity provider by passing the is_admin attribute. If assigning admins this way, you can still manually assign organization admins. However, the is_admin attribute takes precedence and the member’s admin status resets at next login based on how the attribute is defined.

Removing organization members

Removing an organization member removes them from the organization and any workspaces they have access to.

In the header, click the initials icon and select Settings.
Click Workspaces, then select the workspace to open the workspace members list.
In the member’s row, click the Delete (trash can) icon.
Click Remove.

You can remove multiple organization members by selecting multiple rows then clicking Actions > Delete members.

Managing workspace members

Admins can add organization members or groups to any shared workspace in the organization. Workspace managers can add members or groups to the workspaces they manage.

Members can be added to a workspace multiple times, either individually or through different groups. If someone has multiple roles assigned, the role with the highest privileges applies. See Managing groupsfor details.

From Workspaces, select the workspace.
Click Members, then click the Add members (person with plus sign) icon.
Select a workspace-level role, then search for and select the members or groups to add to the workspace.
Click Add members.

Or, add workspace members from the settings page:

In the header, click the initials icon and select Settings.
Click Workspaces, then select the workspace.
Click Add members.
Select a workspace-level role, then search for and select the members or groups to add to the workspace.
Click Add members.

Assigning workspace-level roles

Admins and workspace managers can assign workspace-level roles, including assigning other workspace managers. Workspace roles can be assigned to individual workspace members or to groups that have been assigned to the workspace.

From Workspaces, select the workspace.
Click Members, then locate the member or group in the members list.
Click the role dropdown, then select a role.

Or, change a member or group’s role from the settings page:

In the header, click the initials icon and select Settings.
Click Workspaces, then select the workspace to open the workspace members list.
In the member or group’s row, click the Edit icon.
Click the role dropdown, then select a role.
Click Save.

You can update roles for multiple members by selecting multiple rows then clicking Actions > Update roles.

Removing workspace members

When you remove a member from a shared workspace, they lose access to any work they’ve done in that workspace and any projects they might be collaborating on. If you remove a group from a workspace, all group members lose access.

Members can be added to a workspace multiple times, either individually or through different groups. In this case, someone can appear multiple times in the workspace members list and might need to be removed multiple times. Workspace member searches include any group affiliations in the results.

From Workspaces, select the workspace.
Click Members, then locate the member or group in the members list.
Click the role dropdown, then select Remove access.
Click Confirm.

Or, remove access from the settings page:

In the header, click the initials icon and select Settings.
Click Workspaces, then select the workspace to open the workspace members list.
In the member or group’s row, click the Delete (trash can) icon.
Click Confirm.

You can remove multiple workspace members by selecting multiple rows then clicking Actions > Delete members.