Admin and permissions
Updated 18 May 2026
Workspace roles
- Admin — can invite/remove team members, manage workspace settings, create and archive projects. The workspace owner (whoever created or now owns the billing) is always an admin.
- Member (the default, no flag) — invited workspace user with no admin rights. Sees and works in the projects they have visibility on.
- Guest — not a workspace user at all. Guests are people cc'd on email tasks (see Tyto by email) who get to participate in those specific threads without joining the workspace.
There's no separate "owner" role beyond the billing-owner concept — practically, the owner is also an admin.
Project visibility
A workspace member doesn't automatically see every project. Project visibility is managed per-project (today via the workspace's sharing controls rather than a per-project Members tab). This gives you a soft partition — different teams within one workspace can have private projects from each other without needing two workspaces.
What guests can and can't do
- Reply by email to the threads they were cc'd on
- See those specific threads on a public link if shared
They cannot navigate the workspace, see other projects, or invite anyone else. Guest access exists so people who'll never log into Tyto can still participate from their inbox.
Changing someone's role
Workspace admins can promote a member to admin from team settings. Removing or demoting works the same way. Ownership transfer requires a billing-owner change — talk to us if you need that today.
Security and SSO — what we keep and how we keep it.