# Members and Roles

From Basic onward, a Lora workspace has four roles: **Workspace Owner**, **Admin**, **Moderator**, and **Member**. Your role applies per workspace. On Free, every active member has Admin permissions, so there is no separate role picker.

## The four roles

### Owner

Every workspace starts with one Owner and can have additional Owners. At least one Owner must remain. Owners have all Admin permissions plus ownership-only actions:

- Delete the workspace (on every plan)
- Add or remove other Owners

An Owner can make any active member another Owner. The last Owner cannot step down or leave until another Owner exists. See [Managing ownership](/docs/workspaces#managing-ownership).

### Admin

Admins handle the day-to-day running of the workspace. They can:

- Invite members. The current invite form creates Members; Admins and the Owner can change roles after a person joins.
- Suspend or remove members, and change member roles
- Edit and delete any shortcut in the workspace, with one exception: Private shortcuts they don't own (see [Shortcut ownership](#shortcut-ownership))
- Change workspace settings, including the [permission options](#workspace-permission-options)
- View [workspace analytics](/docs/workspace-analytics)
- Manage billing on the Basic and Business plans. On Enterprise, billing moves to Owner-only.
- On Enterprise, view audit logs, create exports, approve OAuth apps, and manage security settings

### Moderator

Moderators sit between Admins and Members on Basic and higher. They can edit and delete any non-Private shortcut, but they cannot manage workspace settings or the member roster. Private shortcuts remain owner-only.

### Member

Member is the default role for invited people. A Member can:

- Create their own shortcuts and own them
- Edit and delete the shortcuts they own
- Edit other people's Workspace shortcuts when the workspace permission option allows it (off by default)
- Invite other people, but only as Members
- View their own [personal analytics](/docs/personal-analytics)

A Member can't change workspace settings, manage billing, or promote themselves through an invite.

## Shortcut ownership

Every shortcut has a shortcut owner: the person who created it, or whoever it was transferred to. Ownership decides who can edit or delete the shortcut, in combination with the shortcut's [visibility](/docs/creating-shortcuts#visibility).

| Visibility | Shortcut owner can edit/delete | Other Members can edit/delete | Moderator, Admin, and Workspace Owner can edit/delete |
| --- | --- | --- | --- |
| **Workspace** | Always | If the workspace option allows it | Yes |
| **Unlisted** | Always | No | Yes |
| **Private** | Always | No | No |

Admins and Workspace Owners cannot see or open another person's Private shortcuts. Only the shortcut owner has access. Deleting a member from the workspace asks who should own their shortcuts, Private ones included.

Members can transfer ownership of shortcuts they own. Moderators, Admins, and Workspace Owners can also transfer another person's Workspace shortcut. Unlisted and Private shortcuts can only be transferred by the shortcut owner.

## Workspace permission options

Under **Administration → Workspaces → Permissions**, Workspace Owners and Admins can change two options that limit what Members can do to other people's shortcuts. Both options are off by default.

- **Delete restriction**: when on, Members can only delete the shortcuts they own. Moderators, Admins, and Workspace Owners can still delete any non-Private shortcut.
- **Edit-all restriction**: when on, Members can only edit the shortcuts they own. Moderators, Admins, and Workspace Owners can still edit any non-Private shortcut.

The exact UI labels and helper text live in the [Workspace settings](/docs/workspaces#permissions) doc.

## Plans

Roles depend on the plan:

- **Free**: every active member has Admin permissions. Deleting the workspace remains an Owner-only action.
- **Basic and Business**: Owners, Admins, Moderators, and Members have the permissions described above.
- **Enterprise**: the four roles also apply. Workspace Admins and Owners can additionally view audit logs, create exports, approve OAuth apps, and manage security settings.

| | Free | Basic | Business | Enterprise |
| --- | --- | --- | --- | --- |
| Effective role for Members | Admin | Member | Member | Member |
| Moderator shown as a distinct role | No | Yes | Yes | Yes |
| Workspace permission options | No effect (everyone has Admin permissions) | Configurable | Configurable | Configurable |
| Delete workspace | Owner only | Owner only | Owner only | Owner only |

When a Free workspace upgrades to a paid plan, the Free-only "everyone is Admin" override drops away. The person who clicked Upgrade is set to Admin in the database; everyone else falls back to whatever their stored role is, which for invited members defaults to Member. There's no bulk promotion and no snapshot dialog. If you want specific people to keep Admin powers after upgrading, change their role explicitly.

## Managing roles

To change someone's role, go to **Administration → Members**, open their row, and pick a new role. Admins and the Owner see this control.

Owners manage ownership from **Administration → Members**. They can make any active member another Owner. The last Owner can't step down or leave until someone else is an Owner.

If the Owner is the only person in the workspace, there's no one to hand it to. **Leave** then links to the workspace settings, where they can delete the workspace instead. A workspace can't continue with zero members.

## Role comparison

The tables below summarize shipped role behavior on a paid plan. On Free, every active member behaves as an Admin in these tables, except for ownership-only actions.

### Shortcuts

| Action | Member | Moderator | Admin | Owner |
| --- | --- | --- | --- | --- |
| Create shortcuts | ✅ | ✅ | ✅ | ✅ |
| Edit and delete own shortcuts | ✅ | ✅ | ✅ | ✅ |
| Edit and delete others' Workspace shortcuts | If the option allows | ✅ | ✅ | ✅ |
| Edit and delete others' Unlisted shortcuts | ❌ | ✅ | ✅ | ✅ |
| Edit and delete others' Private shortcuts | ❌ | ❌ | ❌ | ❌ |
| Transfer ownership of own shortcuts | ✅ | ✅ | ✅ | ✅ |
| Transfer others' Workspace shortcuts | ❌ | ✅ | ✅ | ✅ |

### Members and invitations

| Action | Member | Moderator | Admin | Owner |
| --- | --- | --- | --- | --- |
| Invite as Member (unless restricted or disabled) | ✅ | ✅ | ✅ | ✅ |
| Suspend or remove members | ❌ | ❌ | ✅ | ✅ |
| Change member roles after they join | ❌ | ❌ | ✅ | ✅ |
| Manage ownership | ❌ | ❌ | ❌ | ✅ |

### Workspace and analytics

| Action | Member | Moderator | Admin | Owner |
| --- | --- | --- | --- | --- |
| View plan-available [personal analytics](/docs/personal-analytics) | ✅ | ✅ | ✅ | ✅ |
| View real [workspace analytics](/docs/workspace-analytics) on Business+ | ❌ | ❌ | ✅ | ✅ |
| Manage Enterprise audit logs, exports, and OAuth approvals | ❌ | ❌ | ✅ | ✅ |
| Change [workspace settings](/docs/workspaces) | ❌ | ❌ | ✅ | ✅ |
| Delete the workspace | ❌ | ❌ | ❌ | ✅ |