Members and Roles
Liteguard controls access to workspaces through membership records and roles. Every person who can view or change a workspace is a member of that workspace with an assigned role. Projects inside the workspace inherit access from the workspace membership, so there are no separate project-level permissions to manage.
Roles
Each workspace member has one of three roles.
Owner — full administrative control over the workspace. Owners can manage workspace settings, create and delete projects and environments, send and revoke invitations, and remove other members. The person who creates a workspace is automatically assigned the owner role.
Editor — can create and update projects, environments, and guards. Editors can also send and revoke invitations. Editors cannot remove other members from the workspace.
Monitor — read-only access to the workspace, its projects, guards, and activity. Monitors cannot change configuration or send invitations.
All three roles can view the workspace, its projects, guard configurations, and activity logs. The difference is what each role is allowed to change.
Project access
Project access is inherited from the workspace. If you are a member of a workspace, you can access every project inside it according to your workspace role. There are no per-project role overrides.
This means that an editor in a workspace can modify guards in any project within that workspace, and a monitor can view any project but cannot change anything.
Viewing members
The People and access section on the workspace detail page shows all active members. Each member row displays the member's identifier, their role, the date they joined, and how they were added to the workspace. A summary at the top of the section shows the total number of members, the number of pending invitations, and your own role.
If the workspace has more than a few members, you can search by name, role, or source to find a specific person. The list paginates automatically when there are many members.
Inviting members
Owners and editors can invite new members by clicking Invite member in the People and access section. The invite modal asks for two things:
- Email address — the email of the person you want to invite.
- Role — the role the person will have when they accept. The default is monitor.
After you send the invite, Liteguard delivers an email to the recipient with a link to accept. The invitation appears in the workspace's pending invitations list immediately.
How invitation acceptance works
- The recipient receives an email with a link to the Liteguard app.
- If they are not already signed in, the link prompts them to log in or create an account.
- The recipient must sign in with the same email address the invitation was sent to. If they sign in with a different email, Liteguard shows a mismatch message and does not grant access.
- Once authenticated with the correct email, acceptance is automatic. The recipient becomes a member of the workspace with the invited role.
- If the recipient already belongs to other workspaces, Liteguard shows an interstitial asking whether to switch to the new workspace or stay in the current one.
Invitation states
Each invitation has a status:
- Pending — the invitation has been sent and is waiting for the recipient to accept.
- Accepted — the recipient accepted the invitation and is now a member.
- Revoked — an owner or editor revoked the invitation before it was accepted.
- Expired — the invitation passed its expiration date without being accepted.
Only one pending invitation can exist for a given email address within a workspace. Sending a new invitation to the same email refreshes the existing one.
Revoking an invitation
Owners and editors can revoke a pending invitation from the People and access section. Revoking an invitation prevents the recipient from using the invite link. They would need a new invitation to gain access.
Viewing invitation history
By default, the invitations list shows only pending invitations. Click Show history to see accepted, revoked, and expired invitations as well. This is useful for reviewing who was invited and when.
Removing members
Workspace owners can remove members from the workspace. Removing a member revokes their access to the workspace and all of its projects immediately. The remove action appears on each member row in the People and access section, except for your own row.
Removed members would need a new invitation to regain access.
Workspace activity
The Workspace activity section on the workspace detail page shows a chronological log of changes to the workspace. Each entry includes a timestamp, a summary of what happened, who performed the action, and the specific fields that changed.
Events recorded in the workspace activity log include:
- Workspace created or updated.
- Member added or removed.
- Invitation created or revoked.
The activity log helps workspace owners and editors understand who changed what and when, without needing to ask team members directly.