Team and roles
Everyone in a workspace has one of three roles: Owner, Developer or Viewer. A member has the same role in live and in the sandbox, but the sandbox lets developers do more, because nothing there moves real money.
What each role can do
| Owner | Developer | Viewer | |
|---|---|---|---|
| Read everything in live and the sandbox | Yes | Yes | Yes |
| Sandbox: API keys, webhooks, simulations, rename and reset | Yes | Yes | No |
| Sandbox: payouts, transfers, routing policies and treasuries | Yes | Yes | No |
| Live: webhook endpoints, wallets, networks and gas alerts | Yes | Yes | No |
| Live: create, rotate and revoke API keys | Yes | No | No |
| Live: move money (payouts, transfers, rejecting a payout) | Yes | No | No |
| Live: direct money (routing policies, treasuries, treasury rules, signing policies) | Yes | No | No |
| Invite, change roles, suspend and remove members | Yes | No | No |
| Ask to go live | Yes | No | No |
| Workspace settings, notification routing and billing changes | Yes | No | No |
In short, as the dashboard puts it:
- Owner: "Everything, in live and the sandbox, including the team, billing and go-live."
- Developer: "Everything in the sandbox. In live, everything except API keys and moving or directing money."
- Viewer: "Reads live and the sandbox, and changes nothing."
Give people only the role they need. A workspace always has at least one owner.
Open the team page
Open the workspace menu and choose Invite and manage members, or go to Settings → Team. The page lists every member with their role and status, and every pending invitation.
Invite people
Only owners can invite.
On the Team page, choose Invite members.
Enter up to ten email addresses, separated by commas, spaces or new lines. Everyone in one batch gets the same Role.
Choose Review, check the list, then choose Send invitations.
Invitations expire after 10 days. Inviting an address that already has a pending invitation replaces it, and the earlier link stops working. Once your workspace is live, inviting people asks for a code from your authenticator app.
To manage a pending invitation, open Member actions on its row and choose Resend invitation or Withdraw invitation. You can also open it and use Copy invite link.
Change someone's role
- On the member's row, open Member actions and choose Change role.
- Pick the new role and confirm with Change role.
You can't change your own role. Ask another owner to do it.
Suspend, reactivate or remove a member
From Member actions:
- Suspend membership blocks the person from this workspace until you let them back in. Their account and other workspaces are untouched.
- Reactivate membership lets a suspended person back in with the same role.
- Remove from workspace ends their access at once. Only a fresh invitation brings them back.
When you remove someone, the dialog lists What they leave behind in live: live API keys and live webhook endpoints they created. These keep working after the person leaves. Tick the ones to revoke with them.
Acting on an owner
Adding, demoting, suspending or removing an owner always asks you to confirm with a code, even before your workspace is live. The code comes from your authenticator app if you have one, and by email otherwise. Every other owner is emailed when it happens.
The last owner can't be removed, demoted or leave. Make somebody else an owner first.
Leave a workspace
Open the account menu, choose Account, and under Workspace access choose Leave workspace. You lose access at once, and only an owner can invite you back.
Confirming sensitive actions
In live, many owner actions ask you to confirm it's you with a second factor. See Two-factor and step-up. For how roles apply to API requests, see Security model on the Developers surface.