> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getarca.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Members and roles

> Invite teammates, manage their access, and assign roles in a workspace.

Workspaces have members with different roles that control access and permissions.

## Roles

| Role       | What they can do                                                              |
| ---------- | ----------------------------------------------------------------------------- |
| **Owner**  | Full access, including billing, member management, and deleting the workspace |
| **Admin**  | Invite members, manage settings, labels, statuses, and all workspace content  |
| **Member** | Create and edit tasks and other workspace content                             |
| **Viewer** | View tasks only, cannot create or edit anything                               |

## Add members

1. Open **Settings > Members**.
2. Click **Invite Member**.
3. Enter their email and choose a role.
4. The invitee receives an email with a link to join the workspace.

## Approve join requests

When invite links are enabled and someone outside your allowed email domains requests access, their request appears at the top of **Settings > Members** for owners and admins. Approve to add them as a member, or decline to reject the request. Both outcomes notify the requester by email.

[Learn more about invite links and security settings](/administration/workspace-security)

## Remove members

Only workspace owners can remove members. Open **Settings > Members** and click the remove icon next to the member you want to remove. The owner cannot be removed.

## Access-restricted members

Workspace owners and admins can restrict a member to a specific subset of folders and lists, regardless of their workspace role. When access restriction is enabled for a member:

* They can only see folders and lists explicitly granted to them.
* Tasks in non-granted lists are hidden from their view.
* Attempting to access a task, create a task in, or comment on a task inside an inaccessible list returns a `403` error via the API.

Access restrictions apply on top of the member's role, a restricted **Member** can still create and edit tasks, but only within the lists they can access.

<Tip>
  Use the Viewer role for clients or stakeholders who need visibility but
  shouldn't make changes to tasks.
</Tip>