Roles & Permissions

Team roles

These are the roles you assign to people on your team. They control what a person can do inside your organization.

Role	Description
Owner	Full control, including the plan and billing, Member governance and every role. Can hand ownership to someone else.
Admin	Manages and deletes all agents, integrations, knowledge, Loops, skills and team members; approves pending items. Sees billing but can’t change the plan or buy credits.
Member	Creates agents, integrations, knowledge, Loops, skills and voices, and runs/edits agents. Cannot delete shared resources, manage billing, or invite members. What a member can do with each agent is set per agent — see Agent access.
Guest	Someone outside your team, invited to one conversation. Reads it and chats in it, and sees nothing else. Access is granted by invitation and can be revoked at any time. See Guest access below.

System roles

You don’t assign these — Auteryn manages them automatically. They exist so that non-team identities (your end-users and the agents themselves) can be represented in the platform.

Role	Description
Customer	An end-user who interacts with one of your customer-facing agents (via the web widget, Telegram, WhatsApp, and other channels). Customers are not members of your organization and have no Console access — they only ever converse with the agent you expose to them.
Agent	The agent’s own identity within the organization. This role represents actions taken by an agent (for example, when an agent runs a Loop or writes back to a connected integration) rather than by a person. It is assigned by the platform and cannot be granted to a user.

Role capabilities

Action	Owner	Admin	Member	Guest
Create agents / knowledge / Loops / skills / voices	✅	✅	✅	❌
Run & edit agents	✅	✅	per agent access	chat in one conversation
Connect integrations	✅	✅	✅¹	❌
Delete agents / integrations / knowledge / skills / voices / Loops	✅	✅	❌	❌
Approve pending items (governance)	✅	✅	❌	❌
Invite / remove members, change roles	✅	✅	❌	❌
Create / revoke API keys	✅	✅	❌	❌
Manage org settings & branding	✅	✅	❌	❌
View billing and usage	✅	✅	✅	❌
Change the plan, buy credits	✅	❌	❌	❌

¹ With Member governance on, a member’s new resource stays pending approval until an owner or admin approves it. See Member governance.

Inviting people

Go to Settings → People
Choose Invite people
Enter one or more email addresses and choose Member or Admin
Choose Send invitations

Owners and admins can invite. The link in the email works for 7 days, and it shows the team, who sent it and the role before the person joins. See Invite people.

Changing a member’s role

Go to Settings → People
Pick Admin or Member in the Role column next to their name

Only the owner changes roles. To hand the organization to someone else, the owner chooses Make owner on that person’s row; the previous owner becomes an admin.

Removing a member

Go to Settings → People, choose Remove member on their row, then Remove. The owner can remove admins and members; an admin can remove members.

Removed members lose access to the org at once, including any session they have open. Removing a member also:

revokes their personal connections and API keys
deletes the connections they added to agents set to Acts as each user
hands the shared connections they set up to the person who removed them
stops their goals and pauses the Loops started for them

Their credentials leave an agent’s computer the next time that agent runs, so nothing keeps acting as a departed person.

Guest access

A guest is someone outside your team you invite to one conversation with an agent, such as a client or a stakeholder who shouldn’t join your organization. A guest can read that conversation and send messages in it, and can’t see anything else in your organization.

Guests can be invited only on an Internal agent with Let people outside your team join its chats turned on.

Invite a guest

Open the conversation in the workspace
In the Collaborators panel, choose Invite
Enter their email (and a name if you like), then choose Send invitation

Accept

The guest opens the invitation link from their email and signs in. They see only the conversation you shared.

Revoke

Revoke a guest from the guest list in the Collaborators panel. They lose access to the conversation at once.