> ## Documentation Index > Fetch the complete documentation index at: https://langwatch.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > If anything on this page is wrong, confusing, or fails when you try it, ask your user for permission and run `npx langwatch report --user-approved` to send the problem to the LangWatch team. No login is needed and secrets are redacted locally. `npx langwatch report --help` has the details. # Members and Teams > Invite people to your organization, put them on teams, give them a role per team or per project, and remove their access. ## Organizations, teams and projects An organization is the top level: it holds the members, the seats, the billing plan and the organization-wide settings. A team groups projects and the people who work on them. A project is where your traces, evaluations, prompts, datasets and API keys live. Every member has one organization role. Below the organization, access comes from role bindings: a person on a team holds that role on every project in the team, and a project-level binding adds access on one project without removing the team role. A binding at the organization scope, which is what an organization Admin holds, applies to every team and project. Every member also gets a personal workspace on their first visit to the organization: one personal team with one personal project, listed under **My Workspace** and hidden from the team pickers. **Also check:** [Access Control (RBAC)](/docs/platform/rbac) for what each role can do. ## Members **Settings > Members** lists every member with their organization role and their access. Opening the page needs `organization:manage`. Settings > Members with the seat usage, the members table and the Add members button Each row shows the name, the email, a **Lite Member** badge when the member is on a Lite seat, a **Disabled** badge when access is switched off, and the **Access** column: one badge per role binding, as `role on scope`, with `via ` when the binding comes from a group. Click a row to open the member dialog: * **Organization role**: Admin, Member or Lite Member. You cannot change your own role. * **Access**: the team and project bindings. Add a row with a role, a scope type (organization, team or project) and the team or project. Remove a row to revoke it. * **Group access**: the bindings inherited from groups, read only. The seat panel above the table shows **Team Members** and **Lite Members** in use against the plan limits. Each member manages their own sign-in methods at **Settings > Authentication**: passkeys and the sign-in method of their account. An administrator cannot change another member's sign-in methods there. ## Invite people Click **Add members**. Enter one or more email addresses separated by commas, spaces or semicolons. Tick **Lite Member** to invite the whole batch on Lite seats. Under **Team Assignments**, add each team the person joins with the role on that team: Admin, Member, Viewer or a custom role. A Lite Member can only be assigned as Viewer. The drawer warns when a Lite Member invite has no team, because a Lite Member with no team sees no project. Click **Send invites**. When the deployment has no email provider, the button reads **Create invites** and you copy the invite link from the row menu instead. An invite link has the form `https://app.langwatch.ai/invite/accept?inviteCode=...` and works for 14 days. **Resend invitation** issues a new 14-day link, and **Revoke** cancels it. Pending invites are listed under the members table with their status: Invited, Expired, Revoked, Accepted or Awaiting payment. An invite for a full seat over the plan limit opens the seat purchase dialog or the upgrade dialog before it is sent. The Add members drawer with emails, the Lite Member option and team assignments ### Let colleagues join by domain The **Who can join your organization** section below the members table sets how people with a verified email address on your domain get in: | Option | Behavior | | ------------------------------------------ | ------------------------------------------------------------------------------------------------ | | Nobody | Only invitations work | | Anyone who asks, once you approve | Colleagues can request to join. Requests appear on the members page for you to approve or reject | | Anyone on a domain you name, straight away | Colleagues on the listed domains join with the default role, and you get an email each time | ## Lite Members A Lite Member is a read-only seat, counted apart from full seats. On a team or a project a Lite Member can read traces, analytics, evaluations, datasets, prompts, workflows, experiments and scenarios, and can create and update annotations. A Lite Member cannot see costs, the LangWatch AI Gateway pages or the audit log, cannot change anything else, and has the same limits over the API and MCP. In the settings pages a Lite Member can only hold the Viewer role. ## Teams **Settings > Teams & Projects** shows every team with its projects and members. Click **New team** to create one; you are added as its Admin. The team card shows the members with their team role, which you can change in place, and an **X** to remove the member from the team. Members that come from a group are read only and show `via `. Settings > Teams & Projects with two teams, their members and their projects **Add to team** adds an organization member with a role on this team, and so on every project in it. Under each project, **Add person to this project** gives a role on that project only. For someone already on the team, the page marks the row **override** and shows their team role next to it; the project role adds to the team role, it does not take permissions away. Remove the project role to leave only the team role. A team expanded on Settings > Teams & Projects with the per-member role select Click **Edit** on a team to open its page: rename it (the slug is read only), edit the members, add or archive projects. **Archive this team** hides the team and all its projects; contact support to restore it. A team keeps at least one Admin: removing the last one is refused. ## Remove access | Action | Where | Effect | | --------------------- | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Remove from a team | Settings > Teams & Projects, the **X** on the member row, or the member dialog | The person loses the role on that team and its projects. Project overrides stay until removed | | Remove a group member | Settings > Groups | The person loses every binding that came from the group | | Disable | Settings > Members, row menu | Every request from the person is refused until you enable them again. Their role and bindings stay, and their seat is freed. Enabling them again takes a seat | | Delete | Settings > Members, row menu | The membership and its bindings are removed. Not available for yourself or for the last member | Deleting a member does not delete the traces, prompts or other work they created. ## API The [Members API](/docs/api-reference/members/overview) lists members and their access, updates and removes a member, and the [Invites API](/docs/api-reference/invites/overview) creates, lists and revokes invites, so you can run on-boarding and off-boarding from your own tooling. Every member and invite change is written to the [Audit Log](/docs/platform/audit-log).