# Zucms

## Members & Roles

> Category: Organization

---

## Pages

- [Introduction](https://docs.zucms.co/introduction)

### API

- [RESTful API](https://docs.zucms.co/api/rest)
- [Typescript SDK](https://docs.zucms.co/api/typescript)

### Getting Started

- [Quick Start](https://docs.zucms.co/getting-started/quick-start)
- [Core Concepts](https://docs.zucms.co/getting-started/core-concepts)

### Models

- [Overview](https://docs.zucms.co/models/overview)
- [Field Types](https://docs.zucms.co/models/field-types)
- [Relations](https://docs.zucms.co/models/relations)

### Content

- [Working with Entries](https://docs.zucms.co/content/working-with-entries)
- [Localization](https://docs.zucms.co/content/localization)

### Access & Security

- [Roles](https://docs.zucms.co/access-security/roles)
- [Access Policies](https://docs.zucms.co/access-security/access-policies)

### Organization

- [Members & Roles](https://docs.zucms.co/organization/members-roles)
- [Audit Log](https://docs.zucms.co/organization/audit-log)
- [Billing & Plans](https://docs.zucms.co/organization/billing-plans)

---

# Members & Roles

Members are users who belong to your organization. Each member has a role that defines their management permissions, and optionally an access policy that controls their content access.

## Inviting members

1. Go to **Organization → Members**.
2. Click **Invite Member**.
3. Enter the email address.
4. Select a role (`admin` or `member`).
5. Send the invite.

The invited user receives an email with a link. Once they accept, they appear in the member list with the assigned role.

Pending invites are shown separately below the member list. You can cancel a pending invite at any time.

## Member limits by plan

| Plan | Max members |
|---|---|
| Free | 1 |
| Start-Up | 5 |

## Changing a member's role

1. Find the member in the list.
2. Open the action menu (⋯).
3. Select **Change role**.
4. Pick the new role.

Owners can assign `admin` or `member`. Admins can only assign `member`. No one can assign `owner`.

## Removing a member

Open the action menu on a member row and click **Remove**. The user loses all access to the organization immediately. Their entries and changes remain in the system.

## Assigning an access policy

An access policy grants content-level permissions. To assign one:

1. Open the action menu on a member row.
2. Click **Assign Policy**.
3. Select a policy from the list.

A member can have at most one access policy. Assigning a new policy replaces the existing one.

## Roles vs. Access Policies

| | Role | Access Policy |
|---|---|---|
| Controls | Org management (settings, billing, invites) | Content (models, entries, fields, files, API) |
| Assigned per | Member | Member or API key |
| Number allowed | One per member | One per member or key |

See **[Roles](/access-security/roles)** and **[Access Policies](/access-security/access-policies)** for full permission details.