Members & roles
The Members page of EntityFlow Hub lists everyone on your account, the roles each person holds, and the invitations that haven't been accepted yet.
Inviting people
Invite someone by email address and choose the role they'll receive. EntityFlow emails them the invitation; they accept it by signing in with that address — with a one-time code, since sign-in is passwordless — and then appear in the list with the role you chose.
Until it's accepted, an invitation stays on the page, where you can cancel it.
Managing a person
For each person you can:
- Change their role per scope — a role applies to a scope: the whole account, or one organization, workspace or team. Give someone a broad role high up, or a narrower one on a single workspace or team.
- Remove them — revoke their access to the account entirely.
The four roles
EntityFlow has four account roles, from highest to lowest rank:
| Role | Summary |
|---|---|
| Owner | Full control of the account, including billing and ownership. |
| Admin | Manage members, structure and settings (not ownership). |
| Editor | Create and edit diagrams; can't manage account structure. |
| Viewer | Read-only access. |
Role-rank safety rule
You can only assign roles below your own rank. An admin, for example, cannot grant Owner or another Admin — that's reserved for owners. This prevents privilege escalation and keeps the highest tiers under tight control.
Roles are not just a UI convenience — every permission is enforced server-side and on the realtime websocket. See the Roles & permissions reference for the full matrix and the cascading-scope model.