Members & Role-Based Access Control

Roles

Role	Description
Owner	Full control, including billing and workspace deletion. Assigned to the creator.
Admin	Full resource management, cannot manage billing or delete the workspace.
Member	Read and write access to devices and MQTT resources.
Viewer	Read-only access to all workspace resources.

Invite a member

1. Go to Workspace Settings → Members
2. Click Invite Member
3. Enter the user's email address
4. Select a role
5. Click Send Invite

The invited user receives an email and must accept the invitation.

Change a member's role

1. Go to Workspace Settings → Members
2. Click the role badge next to the member's name
3. Select the new role

Remove a member

Click the Remove button next to the member. Removed members lose access immediately; their resources (devices, API keys created by them) remain.

API

• GET /workspaces/{id}/members
• DELETE /workspaces/{id}/members/{user_id}