Collaboration

Invite a member

Invite members by email from the organization settings. The recipient accepts the invitation from their account and joins the workspace.

The owner can toggle permissions for each member. New members are read-only by default, following the principle of least privilege.

Permission	Allows
`canManageMembers`	Invite or remove members and change roles.
`canEditVault`	Create, edit, and delete keys and sets.
`canRevealSecrets`	View and copy API key values in the interface.
`canManageBilling`	Manage the subscription.

The owner always has all permissions. An organization can require 2FA: members without 2FA cannot access API keys until they enable it.