# Theo · Teams & Permissions

> Theo runs on organizations. Every account belongs to one or more organizations, with role-based permissions and granular per-member overrides. Invitations, ownership transfer, leave, and delete all live at /dashboard/team.

Source of truth: https://hitheo.ai/teams. Last updated: 2026-05-24.

## At a glance
- 4 roles: owner, admin, member, viewer.
- 15 fine-grained permission bits per member (see below).
- Per-member overrides on top of role defaults.
- Invitations + history, resend, revoke, ownership transfer.
- No seat cap on the free tier.

## Roles
- Owner. Full control. Only one per org. Ownership is transferable; the previous owner becomes an admin on transfer.
- Admin. Manage members, manage skills, manage API keys, manage webhooks, manage billing, manage routing, manage guardrails.
- Member. Use the platform within their permitted scope. Can be granted any subset of permissions via override.
- Viewer. Read-only. See the conversation history, memory graph, audit log; cannot mutate.

## Permission bits (15)
manageMembers, manageInvitations, manageRoles, manageBilling, manageApiKeys, manageWebhooks, manageHooks, manageSkills, manageRouting, manageGuardrails, manageBrandSoul, viewAudit, viewMemory, viewBilling, viewAnalytics.

Defaults are role-based; admins can grant or revoke specific permissions per member.

## Invitations
- Send an invitation from /dashboard/team. The invitee gets an email with a one-click accept link.
- Acceptance lands on the Theo-owned /accept-invitation page so the ticket is preserved across sign-in / sign-up.
- History tab shows past invites (pending, accepted, expired, revoked).
- Re-issue an invite (revokes the prior token and mints a fresh one with the same local UUID).
- Revoke an invite at any time.

## Optimistic UX
The team dashboard renders pending invitations and role changes optimistically, with rollback on server error. The invite "Sending…" pill appears the moment the user clicks Send; no waiting for the network round-trip.

## Audit
Every team action is audited: team.invite.sent, team.invite.resent, team.invite.revoked, team.role.changed, team.permission.changed, team.member.removed, team.ownership.transferred.

## Seat policy
Theo does not cap seats on the free tier. Operators can add as many members as their workflow needs.

## Related machine-readable files
- https://hitheo.ai/llms.txt — full index of every Theo machine-readable file.
- https://hitheo.ai/llms-full.txt — long-form knowledge bundle (single fetch).
- https://hitheo.ai/humans.txt — team and open-source credits.
- https://hitheo.ai/lawyers.txt — trademark notice and legal contact.
- https://hitheo.ai/.well-known/security.txt — security disclosure contact.