# Members & Roles

Source: https://staging-docs.aiand.com/organizations/members/

Organizations support multiple members. Each member has a **role** that determines what they can do.

## Roles

| Role | Inference | API keys | Billing | Members | Org settings |
|------|-----------|----------|---------|---------|--------------|
| `owner` | ✓ | manage | manage | manage | manage |
| `admin` | ✓ | manage | view | manage | view |
| `member` | ✓ | own keys only | view | view | view |

- **Owners** can transfer ownership and delete the org. There is always at least one owner.
- **Admins** can invite/remove members and rotate keys but cannot change billing ownership.
- **Members** can call the API and create API keys for their own use.

## Inviting members

Invite from the [console](https://console.aiand.com) — Settings → Members → Invite. The invitee receives an email; once they accept, the membership is created with the role you chose.

## Removing members

Removing a member revokes their access immediately. API keys they created **remain valid** until explicitly rotated — see [Organization API Keys](/organizations/api-keys/).

<Aside type="caution">
  Roles are evaluated per-request from the membership table, never cached in the JWT. Demoting a user takes effect on their next request.
</Aside>