> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.runtype.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.runtype.com/_mcp/server.

# Team members and permissions

Invite team members to your Runtype organization and assign roles that control
organization access.

## Before you begin

Switch to the organization that you want to manage. **Settings > Team** manages
only the active organization, and it is not available in a personal account. To
switch, see
[Switch between organizations](/user-guide/settings/what-are-organizations#switch-between-organizations).

## Invite team members

As an organization admin, follow these steps to invite one or more people:

1. Open **Settings > Team**.
2. Click **Invite Member**.
3. Enter one or more email addresses in **Email addresses**. To add many
   addresses at once, paste a list separated by commas, semicolons, spaces, or
   new lines.
4. Select **Member** or **Admin** in **Role**.
5. Click **Send invitation**. For multiple addresses, the button shows the number
   of invitations.

Runtype sends each invitee an email invitation to join your organization. The
invitation appears under **Pending Invitations** until the invitee accepts it.
The person then appears in **Team Members**.

An organization can have up to 20 members.

### Fix invitation errors

If an address fails, the dialog stays open and shows an error next to that
address. Addresses that succeed leave the dialog. The following list describes
each error:

* **Invalid email address**: correct the address and send the invitation again.
* **Duplicate email**: remove the repeated address.
* **Already a member of the organization**: remove the address. The person
  already has access.
* **An invitation has already been sent**: remove the address, or revoke the
  pending invitation and send it again.

### What the invitee sees

To join the organization, the invitee follows these steps:

1. Open the invitation email and click the link.
2. If the **Join your team** page opens, create an account, or sign in with an
   existing account. An invitee who is already signed in skips this page.

The dashboard opens in your organization.

## Revoke a pending invitation

As an organization admin, follow these steps to cancel an invitation that has
not been accepted:

1. Open **Settings > Team**.
2. In **Pending Invitations**, find the invitation.
3. Click **Revoke**.

## Roles and permissions

Use the following roles to control access to organization resources and settings.

### Admin

If you have the **Admin** role, you have all **Member** permissions. You can
also:

* Manage billing, subscriptions, and the monthly spend cap.
* Invite, promote, demote, and remove members, and revoke pending invitations.
* Add, change, and remove the organization's provider API keys, and choose
  whether the organization uses its own provider key or a Runtype platform key.
* Configure MCP server client credentials and change MCP servers that other
  members added.
* View every management API key in the organization. You manage only the keys
  that you created. Keys that other members created are read-only for you.

### Member

If you have the **Member** role, you can create and edit Flows, Agents, and
Products. You can manage Records and Tools, run Evals, and view logs. You can
manage shared model availability, non-secret model settings, and the default
model. Model settings that a Member changes apply to the whole organization.

With **Member** access, you cannot change billing, manage members, or change
the organization's provider API keys.

## View team settings as a member

If you have the **Member** role, open **Settings > Team** to view organization
members and their roles. Runtype displays a banner that says only organization
admins can invite or manage members. **Invite Member**, the member actions
menus, and **Pending Invitations** appear only for admins.

## Change a member's role

As an organization admin, follow these steps to change a member's role:

1. Open **Settings > Team**.
2. Find the member.
3. Open the actions menu at the end of the member's row.
4. Click **Make Admin** to promote the member, or click **Make Member** to demote
   the member.

Runtype applies role changes immediately. Your own row has no actions menu, so
another admin must change your role.

## Remove a team member

> **Warning**
>
> Removing a member also revokes the API keys and client tokens that the member
> created in this organization. Integrations and embedded widgets that use
> those credentials stop working immediately. Before you remove the member,
> replace any of their keys and tokens that production integrations use.

As an organization admin, follow these steps to remove a member:

1. Open **Settings > Team**.
2. Find the member.
3. Open the actions menu at the end of the member's row.
4. Click **Remove from Organization**.
5. In the confirmation dialog, click **Remove Member**.

The removed member loses access to the organization's resources immediately.
Flows, Agents, and other resources that the member created stay in the
organization. Your own row has no actions menu, so you cannot remove yourself
from this page.

## Best practices

Use these practices to manage organization access:

* Apply least privilege: start with **Member** access and promote people only
  when they need admin permissions.
* Limit **Admin** access to the people who manage the organization.
* Invite people with work email addresses to identify organization members.
* Review the member list regularly and remove people who leave the team.

## Next steps

Use these pages to continue:

* [What are Organizations?](/user-guide/settings/what-are-organizations): learn
  how organizations separate resources
* [Connecting AI model providers](/user-guide/integrations/connecting-ai-model-providers):
  add shared model credentials
* [Managing API keys](/user-guide/settings/managing-api-keys): create and manage
  API keys
* [Client tokens and domain restrictions](/user-guide/products-surfaces/client-tokens-and-domain-restrictions):
  manage client tokens for embedded widgets
* [Billing and plans](/user-guide/settings/billing-and-plans): manage your
  subscription
* [Appearance and preferences](/user-guide/settings/appearance-and-preferences):
  customize your personal settings