Organization & Team Permissions
What owners and members can each do, how invites work, and how workspaces stay isolated.
Your workspace (an organization internally) owns everything you create. Signing up creates one and makes you its owner.
Who can do what
| Action | Owner | Member |
|---|---|---|
| Create and send campaigns | Yes | Yes |
| Import contacts, manage lists | Yes | Yes |
| Create templates | Yes | Yes |
| Use shared SMTP configs | Yes | Yes |
| Add or edit SMTP configs | Yes | Yes |
| Invite teammates | Yes | No |
| See another user's private templates | No | No |
Deliberately simple
There are two roles, not a permissions matrix. Small teams rarely need more, and every extra role is another way to lock yourself out.
How invites work
- 1
The owner invites an email address
Team → enter their email → Send invite.
- 2
A signed link is generated
It carries a cryptographic token and expires after 7 days.
- 3
They accept
Signing in (or signing up) with that exact address, then confirming.
- 4
They join as a member
With immediate access to shared configs, templates and lists.
Invites are bound to the address
An invite for sam@acme.com can only be accepted while signed in as sam@acme.com. Forwarding it doesn't let someone else in: you'll see a "wrong account" message.
What's shared and what isn't
- Shared: contacts, lists, SMTP configs, campaigns, statistics, templates marked shared.
- Private: templates you mark private: enforced by the database, not just hidden in the UI.
Isolation between workspaces
Every table is protected by row-level security. Requests are filtered by workspace membership inside the database itself, so another workspace cannot read your data even if an application bug leaked an identifier.
Did this help?
Related articles
Template Variables
How {{variables}} work, where they come from, and the one variable every template must contain.
Team roles, invites and the activity log
What an Owner, Admin and Member can do, how to invite, remove and hand over, and where to see who changed what.
Your account: emails, your data and deleting it
Choose which emails you get, download everything Vecta holds about you, delete your account, and the sign-in help.