Access control

Set a workspace role when you invite someone, then add the teams they need.

Give people the access their jobs require, then stop. Workspace roles control administration; team membership decides where someone can work.

Access has two layers

Workspace role

Owner, Admin, or Member sets the actions someone can take across the workspace.

Team membership

Team membership opens that team's agents, sessions, and shared resources.

An admin can fix access across the workspace; a member sees only the teams they've joined. See how that boundary works in Teams.

Choose the lowest role that fits

Start most people as Members. Promote someone to Admin or Owner only when their job includes managing the workspace itself.

Owner

Has the highest access level.

Owners can do everything an admin can. Only they can grant or remove the Owner role, transfer ownership, or permanently delete the workspace.

Admin

Runs membership and shared setup.

Admins invite and remove members, assign Admin or Member, manage teams, and configure shared connections, skills, MCP servers, and knowledge.

Member

Works inside their teams.

Members use their teams' agents and shared resources, without workspace-wide admin controls.

Image placeholder

Members, roles, and pending invitations

Take this screenshot from Settings > Teams at 4K and 100% browser zoom. Put Members and Pending invitations in the same frame, with demo entries for each role and one pending invite; hide every real email address.

Invite people into the right scope

Go to Settings > Teams, then choose Invite member. Enter an email address, pick Admin or Member, and select the teams that person needs.

Once the recipient accepts, Hivy adds them to those teams. They must sign in with the address that received the invitation.

Open team settings

Manage pending invitations

Owners and admins see outstanding invites under Pending invitations. Each link expires after seven days; resend it to create a new link and expiry, or revoke it to stop the person from joining.

Video placeholder

Invite a member with the right access

Record a 45 to 60 second walkthrough at 4K and 100% browser zoom. Invite a demo user as a Member on two teams, show the pending invite, then use Resend and Revoke without exposing a real email address.

Change access as responsibilities change

Owners and admins can change another person's role or remove them from the workspace. Edit team membership separately when the person moves between groups; their workspace role can stay the same.

Hivy blocks self-service role changes. Only an Owner can grant or revoke ownership, and nobody can demote or remove the last Owner.

Transfer ownership deliberately

When an Owner transfers the workspace, Hivy promotes the chosen member to Owner and changes the previous Owner to Admin in the same operation. An Owner always remains.

A safe starting point

Start most people as Members.
A person only needs the teams they work in.
Reserve Admin for people who manage members, teams, and shared workspace setup.
For continuity, keep a second trusted Owner.