The roles
Owners and admins can see, message, and edit every agent in the workspace, whatever its access settings. A member edits the agents they created and any they have been given edit or owner access to. The per-agent matrix lives in Permissions & visibility.
For billing specifically: members can view the current credit balance, auto-refill settings, and any spend limit that’s set, but the controls to change them are locked. The UI shows the settings; saving requires owner or admin.
Assigning a role
New members join as member. Change someone’s role from the Members page in workspace settings. Members can invite teammates too, by email or with the workspace invite link, and anyone they invite joins as a member. Picking a role for a new invite (admin or owner) stays an owner and admin call. Anyone who joins through the workspace invite link also lands as a member, so if someone needs more, raise their role after they join.Removing someone
Admins can remove a member from the Members list: open their actions, choose Remove member, and confirm. Removal takes away their access but keeps the agents they created, so nothing the team depends on disappears with the person. You cannot remove yourself.The audit log
Owners and admins can open the workspace audit log from settings. It is the record of who did what across the workspace: member and role changes, agent privacy and edit-access changes, secret access, integration connects and disconnects, API-key changes, and sign-in events. You can review it in place or export it for a compliance review. Recording is always on, so history is there from the start, and members cannot see it.Two questions, two answers
It is worth keeping these separate:- “Who can change this agent?” is a role question, answered here.
- “Who can see and message this agent?” is a visibility question, answered per agent.
Permissions & visibility
Who can see and message each agent.
Teams
Grouping people and agents inside a workspace.