# Members and roles

> Inviting people to a shared workspace, and what each role can do.

Shared workspaces have people in them. Managing those people is a **human**
action — done in the dashboard, never by an agent. Your agent can read and write
the memory in a space it belongs to, but it can't add, remove, or re-role
anyone.

## Roles

- **Owner** — full control of the workspace, including transferring ownership.
  Every shared space has exactly one owner.
- **Admin** — manages members: invites, removes, and changes roles.
- **Member** — reads and writes the shared memory, and tends it with the
  Dreamer.

## Invitations

You invite someone by email from the **Members** view. They receive a branded
link, and acceptance is bound to their **confirmed account** — an invite for one
address can't be claimed from another. From the same view you can resend or
revoke an invite, change a member's role, remove a member, or leave a workspace
yourself.

## Ownership

Ownership can be transferred to another member, and a space always has exactly
one owner — the handover is atomic, never leaving the space ownerless or with
two owners. An owner who wants out transfers ownership first, then leaves.

Everything here lives at `/dashboard/members`. None of it touches the memory
itself — it's about who stands around the same well, not what's in it.