Members & roles
Invite people to your organization, add them to projects, and control what they can do.
Access in Compass works at two levels: who belongs to your organization, and who can work in each project. You manage both from Settings.
Organization members
Under Settings → Organization, you can see everyone in the organization and the role each holds.
If you have permission to manage membership, you can also:
- Invite people — send an invitation by email and assign them a role. The role options are the ones defined for your organization.
- Change roles or remove members — adjust someone's role or take away their access.
- Manage pending invitations — see invitations you've sent and revoke any that haven't been accepted.
Organization roles are defined and governed by your organization's identity setup, and they determine organization-wide capabilities — including who can manage members.
Project members
Within a project, Settings → Project → Members controls who can work in it. You add people from your organization to the project and give them a project role:
| Role | Can do |
|---|---|
| Admin | Everything a member can, plus manage project members, edit project settings, and perform credentialed actions like managing connections. |
| Member | Use the project — build and run agents and workflows. |
Adding someone to a project draws from your organization's existing members; you invite people to the organization first (above), then grant them access to specific projects.
Admins span their organization
Administrators of the organization automatically have admin access to every project in it, so they don't need to be added project by project. See Organizations.
How roles gate actions
Your role decides what you can do, not just what you can see. Routine work — building and running agents and workflows — is open to members, while sensitive actions are restricted to admins:
- managing project members and settings,
- and creating or changing connections, which hold credentials.
This keeps everyday building friction-free while protecting credentials and configuration.