| Role | Scope | Key permissions |
|---|---|---|
| Org Admin | Organization-wide | Manage members/teams, storage (volumes), billing, policies, and (future) clusters |
| Member | Self & teams | Create/use workspaces, use team volumes, accept invites |
One person can be both Admin and active user. Many orgs start with a single Admin who later invites teammates as Members.