Members and Roles
A Lora workspace has three roles: Owner, Admin, and Member. Your role is set on your membership row, so it’s per workspace. Being an Admin in one workspace says nothing about your role in another.
The three roles
Owner
Every workspace has exactly one Owner, set when the workspace is created. The Owner has all Admin permissions plus a few that only the Owner can do:
- Delete the workspace (on every plan)
- On the Enterprise plan: manage billing, the audit log, workspace exports, OAuth-app approvals, and security settings (2FA enforcement and IP allowlist)
The Owner role can be transferred to another member, but it can’t be left vacant. If the Owner wants to leave the workspace, Lora opens a transfer dialog first.
Admin
Admins handle the day-to-day running of the workspace. They can:
- Invite members at any role (except Owner)
- Suspend or remove members, and change member roles
- Edit and delete any shortcut in the workspace, with one exception: Private shortcuts they don’t own (see Shortcut ownership)
- Change workspace settings, including the permission toggles
- View workspace analytics
- Manage billing on the Basic and Business plans. On Enterprise, billing moves to Owner-only.
Member
Member is the default role for invited people. A Member can:
- Create their own shortcuts and own them
- Edit and delete the shortcuts they own
- Edit other people’s Workspace shortcuts when the workspace permission toggle allows it (off by default)
- Invite other people, but only as Members
- View their own personal analytics
A Member can’t change workspace settings, manage billing, or promote themselves through an invite.
Shortcut ownership
Every shortcut has an owner: the person who created it, or whoever it was transferred to. Ownership decides who can edit or delete the shortcut, in combination with the shortcut’s visibility.
| Visibility | Owner can edit/delete | Other Members can edit/delete | Admin and Owner can edit/delete |
|---|---|---|---|
| Workspace | Always | If the workspace toggle allows it | Yes |
| Unlisted | Always | No | Yes |
| Private | Always | No | No |
That last row is the privacy promise: even an Admin or the Owner can’t open a Private shortcut they don’t own. Private is private. If a Member leaves the workspace and still owns Private shortcuts, Lora gives them a chance to release or transfer those before they’re removed. The workspace doesn’t quietly hand them to someone else.
Members can transfer ownership of shortcuts they own. Admins and Owners can transfer ownership of any shortcut.
Workspace permission toggles
Under Administration → Workspaces → Permissions, the Owner and Admins can change two toggles that limit what Members can do to other people’s shortcuts. Both default to off, which matches Lora’s older behavior. Flipping either one tightens the workspace.
- Delete restriction: when on, only Admins and the Owner can delete shortcuts they don’t own. Members can still delete the ones they own.
- Edit-all restriction: when on, Members can only edit the shortcuts they own. Admins and the Owner can still edit any shortcut.
The exact UI labels and helper text live in the Workspace settings doc.
Plans
The role logic is the same on every plan, with two exceptions:
- Free: every active member is treated as an effective Admin. You don’t need to promote anyone for a small team to function. The only Owner-only action that survives is deleting the workspace.
- Enterprise: billing moves from Admin to Owner-only, and the Owner picks up the compliance cluster (audit log, workspace exports, OAuth-app approvals, security settings).
| Free | Basic | Business | Enterprise | |
|---|---|---|---|---|
| Effective role for Members | Admin | Member | Member | Member |
| Workspace permission toggles | No effect (everyone is effectively Admin) | Configurable | Configurable | Configurable |
| Billing access | Not applicable | Admins and Owner | Admins and Owner | Owner only |
| Delete workspace | Owner only | Owner only | Owner only | Owner only |
| Audit log, exports, OAuth approvals, security settings | — | — | — | Owner only |
When a Free workspace upgrades to a paid plan, the Free-only “everyone is Admin” override drops away. The person who clicked Upgrade is set to Admin in the database; everyone else falls back to whatever their stored role is, which for invited members defaults to Member. There’s no bulk promotion and no snapshot dialog. If you want specific people to keep Admin powers after upgrading, change their role explicitly.
Managing roles
To change someone’s role, go to Administration → Members, open their row, and pick a new role. Admins and the Owner see this control.
To transfer the Owner role, the Owner clicks Leave workspace in their own member panel. Lora opens a transfer dialog with the oldest Admin pre-filled as the suggested new Owner. The current Owner picks the new Owner, decides whether they want to stay on as Admin, drop to Member, or leave the workspace entirely, and confirms. The transfer happens atomically — the workspace is never left without an Owner.
If the Owner is the only person in the workspace, the Leave button is replaced with Delete workspace. A workspace can’t continue with zero members.
Role comparison
The tables below summarize what each role can do on a paid plan. On Free, every Member behaves as an Admin in these tables, except for Delete workspace, which stays Owner-only on every plan.
Shortcuts
| Action | Member | Admin | Owner |
|---|---|---|---|
| Create shortcuts | ✅ | ✅ | ✅ |
| Edit and delete own shortcuts | ✅ | ✅ | ✅ |
| Edit and delete others’ Workspace shortcuts | If the toggle allows | ✅ | ✅ |
| Edit and delete others’ Unlisted shortcuts | ❌ | ✅ | ✅ |
| Edit and delete others’ Private shortcuts | ❌ | ❌ | ❌ |
| Transfer ownership of own shortcuts | ✅ | ✅ | ✅ |
| Transfer ownership of any shortcut | ❌ | ✅ | ✅ |
Members and invitations
| Action | Member | Admin | Owner |
|---|---|---|---|
| Invite as Member | ✅ | ✅ | ✅ |
| Invite as Admin | ❌ | ✅ | ✅ |
| Suspend or remove members | ❌ | ✅ | ✅ |
| Change member roles | ❌ | ✅ | ✅ |
| Transfer the Owner role | ❌ | ❌ | ✅ |
Workspace and analytics
| Action | Member | Admin | Owner |
|---|---|---|---|
| View personal analytics | ✅ | ✅ | ✅ |
| View workspace analytics | ❌ | ✅ | ✅ |
| Change workspace settings | ❌ | ✅ | ✅ |
| Manage billing on Basic and Business | ❌ | ✅ | ✅ |
| Manage billing on Enterprise | ❌ | ❌ | ✅ |
| Delete the workspace | ❌ | ❌ | ✅ |
| Audit log, exports, OAuth approvals, security settings (Enterprise) | ❌ | ❌ | ✅ |