> ## Documentation Index
> Fetch the complete documentation index at: https://docs.terminus.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Team Members in Terminus Hub

> Invite people, assign account and workspace roles, suspend or remove members, and understand how seats relate to your plan.

<Info>
  Every account has one shared team. You decide who joins, what they can do across the whole account (their **account role**), and, for regular members, which workspaces they can reach (their **workspace role**). Inviting someone is the only way to add a new person: there is no public sign-up into an existing account.
</Info>

Open **Admin > Members** to see everyone on the account and their status. Inviting, editing roles, suspending, and removing all happen here. Only account owners and admins can open this area.

## Account roles

An account role applies to the whole account. Each person has exactly one.

<CardGroup cols={3}>
  <Card title="Owner" icon="crown">
    Full control of the account, including billing and the account itself. The owner can do everything an admin can. There is exactly one owner per account, and the owner cannot be suspended or deleted.
  </Card>

  <Card title="Admin" icon="shield-halved">
    Manages the account: members, governance models, taxonomies, workspaces, and other settings. Admins can reach every workspace automatically. An admin cannot edit or remove the owner.
  </Card>

  <Card title="Member" icon="user">
    A regular collaborator with no account-management rights. A member sees only the workspaces they have been assigned to, with the permissions of their workspace role in each one.
  </Card>
</CardGroup>

<Note>
  A member who has not been assigned to any workspace can see almost nothing after signing in. Assign at least one workspace when you invite a member.
</Note>

## Workspace roles

Workspace roles only apply to people whose account role is **Member**. They set what that person can do inside a single workspace, and you assign them per workspace.

| Workspace role | What they can do                                                                                   |
| -------------- | -------------------------------------------------------------------------------------------------- |
| **Admin**      | Manage that workspace, including its settings and which taxonomies it uses, plus everything below. |
| **Member**     | Create and edit submissions in that workspace.                                                     |
| **Viewer**     | Read-only access to that workspace.                                                                |

Owners and admins are never assigned workspace roles. Their access to every workspace is automatic. For the full picture of what a workspace is, see [Workspaces](/account/workspaces) and the [workspaces reference](/reference/workspaces).

## Inviting a member

<Steps>
  <Step title="Open the invite form">
    Go to **Admin > Members** and click **Invite new member**.
  </Step>

  <Step title="Enter the email address">
    Type the person's email. Each invitation is tied to one email address.
  </Step>

  <Step title="Choose an account role">
    Pick **Admin** or **Member**. Choose Admin for someone who needs the whole account and all workspaces. Choose Member for someone who should only reach specific workspaces.
  </Step>

  <Step title="Assign workspaces (member role only)">
    If you chose Member, a workspace picker appears. Select the workspaces this person should reach and set a workspace role (Admin, Member, or Viewer) for each. Owners and admins skip this step, since they already reach every workspace.
  </Step>

  <Step title="Send the invitation">
    Click send. Terminus Hub emails an invitation link to the address. The person becomes an active member only after they open the link and accept. The link expires after 7 days.
  </Step>
</Steps>

For what the invitee sees and how they accept, see [Invitations](/authentication). A pending invitation does not consume a seat: the seat is counted only when the person accepts and becomes active.

## Member statuses

Each row in the Members list shows one status.

| Status        | Meaning                                                                                     |
| ------------- | ------------------------------------------------------------------------------------------- |
| **Pending**   | Invited but not yet accepted. Does not count as a seat.                                     |
| **Active**    | Accepted, can sign in, and counts as a seat.                                                |
| **Suspended** | Access removed, but the membership is kept so it can be restored. Does not count as a seat. |

## Managing members

### Edit a role or workspace access

Click a member to open their record. Change their account role, their workspace assignments, or a workspace role, then save. Changes take effect on their next page load.

You cannot change the owner's role here, and you cannot promote someone else to owner: each account has a single owner.

### Suspend and recover

Suspending a member removes their access immediately while keeping their data and assignments. From a member's row in **Admin > Members**, choose **Suspend user**. To restore access later, choose **Recover user** (or **Recover member** on the member's record). They return to **Active**.

### Remove a member

<Warning>
  You cannot delete an active member directly. The delete action is locked with the message "Active members cannot be deleted. Please suspend the member first." Suspend the member, then delete.
</Warning>

Once a member is suspended (or still pending), choose **Delete** to remove them from the account. This cannot be undone. To rejoin, the person must be invited again.

The owner can never be suspended or deleted. The delete action for the owner is locked with "Owner cannot be deleted."

### Resend an invitation

For a member who is still **Pending**, choose **Resend Invitation** from their row. A brand-new link is emailed and the previous link stops working. There is no way to recover the old link, so always resend rather than digging up the original email.

## Seats and your plan

A **seat** is an active member. Only people with the **Active** status count toward your seat usage. Pending and suspended members do not count.

Some plans set a hard seat cap. When an account is at its cap, accepting a new invitation (or otherwise activating a member) is blocked with a message that the account has reached its seat limit. Suspending or removing an active member frees a seat. Many plans bill for additional usage instead of enforcing a fixed ceiling, so whether you ever hit a hard cap depends on your plan. For plan limits and billing, see your billing settings.

## Gotchas

* **Two role systems, do not mix them up.** Account role (owner / admin / member) controls account-wide access. Workspace role (admin / member / viewer) only applies to members, per workspace. Owners and admins ignore workspace roles entirely.
* **Suspend before delete.** There is no one-click way to remove an active member. Suspend first, then delete.
* **One owner.** Every account has exactly one owner, who cannot be suspended or deleted. There is no self-serve "transfer ownership" action in the app today; contact support if you need to change who owns the account.
* **Only active members count as seats.** A pending invitation never consumes a seat. The seat is used the moment the invitee accepts.
* **Resending replaces the link.** Each resend rotates the invitation link, so the old one dies. Hand the person the newest email.

## Related

<CardGroup cols={2}>
  <Card title="Workspaces" icon="layer-group" href="/account/workspaces">
    Create workspaces, connect taxonomies, and assign members from the account.
  </Card>

  <Card title="Workspaces reference" icon="book" href="/reference/workspaces">
    The full workspace concept: scoping, option filters, and review settings.
  </Card>

  <Card title="Invitations and sign-in" icon="envelope" href="/authentication">
    How invitees accept and how people sign in to Terminus Hub.
  </Card>

  <Card title="API keys" icon="key" href="/account/api-keys">
    Authenticate programmatic access to your account's data.
  </Card>
</CardGroup>
