Skip to main content
Uplint workspaces are built for teams. You can invite teammates by email, assign them a role, and rely on that role to decide what they can and cannot do. This page covers how invitations work and the exact difference between an Admin and a Member.

​
Roles at a glance

Every person in a workspace has one of three roles.
You choose Admin or Member when you send an invite. The Owner role belongs to the workspace creator and is not something you assign or transfer through the invite flow.

​
What each role can do

The table below shows exactly where the roles differ. Anything not listed as restricted is available to everyone in the workspace. In practice the difference comes down to three things: team management (inviting, resending, changing roles, and removing people) and workspace-level actions (changing the company name, exporting data, changing the plan) are limited to Owners and Admins; the Danger Zone is hidden from Members entirely; and deleting the workspace is limited to the Owner alone. Members keep full access to the day-to-day product and can always view usage, but the Upgrade control is reserved for Owners and Admins. These rules are enforced on the server, so they hold even for direct API calls, not just in the dashboard UI.

​
Owner

The Owner is the account that created the workspace during signup. Owners can do everything an Admin can do, plus the one thing no one else can: permanently delete the workspace and all of its data. Because that action is irreversible, it is reserved for the Owner only.

​
Admin

Admins are trusted teammates who help run the workspace. An Admin can invite new people, change a teammate’s role between Admin and Member, and remove teammates, alongside full access to files, contexts, storage buckets, and API keys. The one boundary is destructive account actions: an Admin cannot delete the workspace.

​
Member

Members have full access to the day-to-day product: uploading and validating files, working with file contexts, storage buckets, and API keys, and managing their own name, password, and active sessions. They can also view usage and storage, and set their own preferences (timezone, date format, theme, and language), which apply only to them and never change what other members see. What a Member cannot do is manage the workspace or the team. The Team screen is read-only for Members (no invite box, no role selector, no remove or resend buttons), and the following are hidden and blocked: changing the company name, exporting workspace data, upgrading the plan, and the entire Danger Zone. Any of these actions attempted directly against the API is rejected with a 403 Forbidden.

​
Inviting a teammate

Only Owners and Admins can send invites. If you do not see the invite option, ask an Owner or Admin on your team.
1

Open the Team settings

In the dashboard, go to Settings and select the Team tab.
2

Enter the email and choose a role

Type the teammate’s email address and pick either Admin or Member. You can change the role later.
3

Send the invite

Select Invite. Uplint emails the teammate a secure, single-use link to join the workspace.
4

They accept and join

The teammate opens the link, confirms the workspace and role they are joining, sets their name and a password, and joins. They land in the dashboard right away.
You cannot invite an email address that already belongs to an Uplint account. If a teammate already has their own workspace, they will need a separate account to join yours.

​
Accepting an invite

When someone is invited, they receive an email showing who invited them, the workspace name, and the role they have been given. The email contains a Join button that opens the setup page. On the join page they confirm the workspace and role, then create their account by entering their full name and a password. Passwords must be at least 8 characters and include an uppercase letter, a lowercase letter, and a number. Because accepting the invite proves the person controls that email address, their account is verified and active immediately, so there is no separate email-verification step.

​
Changing a role or removing a member

Owners and Admins manage existing teammates from the same Settings → Team screen:
  • Change a role by selecting a new role (Admin or Member) next to a member. The change takes effect immediately.
  • Remove a member with the remove button next to their name. Removing a teammate revokes their access to the workspace, but their past activity is preserved in the audit logs for your records.
Roles can only be set to Admin or Member. The Owner role cannot be assigned to another person through role changes, and removing a member does not transfer ownership.

​
How invitations stay secure

Invitations are designed so a link cannot be guessed, reused, or left open indefinitely:
  • Single-use tokens. Each invite link carries a cryptographically random token. Only a hash of the token is stored, never the token itself, and it is consumed the moment the invite is accepted.
  • Expiring links. Invite links expire after 7 days. After that, an Owner or Admin can send a fresh invite.
  • No account collisions. An email that already has an Uplint account cannot be invited, which prevents a link from quietly attaching to an existing user.
  • Fresh links on re-invite. If you remove someone and later invite them again, they receive a brand-new link and the old one stays invalid.
Role checks are enforced on the server, not just hidden in the dashboard. Even a direct API call to a team-management endpoint is rejected unless the caller is an Owner or Admin.