> ## Documentation Index
> Fetch the complete documentation index at: https://docs.entryway.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Team and roles

> Invite teammates, choose what each person can do, and keep client workspaces separate.

Everything in Entryway happens inside a workspace. Each member has one role in that workspace, and the server checks that role on every action, even if a button was visible before a permission changed.

## Roles

| Role | What they can do |
| - | - |
| **Owner** | Everything an admin can do, plus the protected ownership rules, such as inviting another owner |
| **Admin** | Edit work; review and approve; manage members, billing, LinkedIn connections, AI providers, data controls and client workspaces |
| **Operator** | Edit content, the Vault, leads and sequences; import people; work the Inbox; schedule or launch work that has already been approved. Cannot approve, or manage members, billing or connections |
| **Reviewer** | Read the workspace's work and approve or reject exact versions of content, sequences and Vault claims. Cannot edit, send or manage the workspace |
| **Viewer** | Read the workspace's records and available exports. Cannot change or approve anything |

Your own role is shown in **Settings → Workspace**.

## Inviting a teammate

Owners and admins invite people in **Settings → People & roles**.

1. Under **Invite a teammate**, enter their email address and choose a role.
2. Choose **Invite teammate**.
3. Entryway emails the invitation from [notifications@email.entryway.ai](mailto:notifications@email.entryway.ai) and also shows an **Invitation link** you can share yourself. The link is shown only once. If email sending is not available, the message says so and you share the link.

They join when they sign in with that email address verified on their account; nobody else can accept the invitation. Invitations expire after 7 days. Only an owner can invite another owner.

**Pending invitations** lists invitations that have not been accepted. You can revoke an invitation, and an expired invitation can be renewed to create a new link for the same person and role.

## Changing or removing access

In **Settings → People & roles**, change a member's role or set their access to **Revoked**, then choose **Save**. Changes take effect on the member's next action. Revoking access or changing a role also disables any [MCP access tokens](/workspace/mcp-access) that member created.

## Client workspaces (Agency plan)

On the Agency plan, the billing workspace can create up to **10 separate client workspaces** in **Settings → Workspace → Client workspaces** and allocate purchased LinkedIn profiles to them. Each client workspace has its own members, Vault, leads and records. Only the person who creates a client workspace becomes its first member; invite anyone else who needs access.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.