Account Management
Managing user accounts, roles, and permissions
Account Management
This guide covers managing user accounts, roles, and permissions in Bklit.
User Roles
Owner
- Full access to workspace
- Can delete workspace
- Manage billing
- Invite/remove members
- Create/delete projects
- Manage all settings
Admin
- Manage projects
- Invite members (not owners)
- Manage API tokens
- Cannot delete workspace
- Cannot manage billing
Member
- View projects
- View analytics
- Cannot manage settings
- Cannot invite members
Super Admin
- Unlimited access
- Bypass all limits
- All features available
- Set via database only
Managing Members
Inviting Members
- Go to workspace settings
- Click "Members"
- Click "Invite Member"
- Enter email and role
- Send invitation
Removing Members
- Go to workspace settings
- Click "Members"
- Find member to remove
- Click remove button
- Confirm removal
Changing Roles
- Go to workspace settings
- Click "Members"
- Find member
- Change role
- Save changes
Account Settings
User Profile
Users can manage:
- Email address
- Display name
- Profile picture
- Password (if using email auth)
Organization Settings
Owners/admins can manage:
- Organization name
- Logo
- Billing
- API tokens
- Projects
Permissions Matrix
| Action | Owner | Admin | Member |
|---|---|---|---|
| View Analytics | ✅ | ✅ | ✅ |
| Create Project | ✅ | ✅ | ❌ |
| Delete Project | ✅ | ✅ | ❌ |
| Manage API Tokens | ✅ | ✅ | ❌ |
| Invite Members | ✅ | ✅ | ❌ |
| Remove Members | ✅ | ❌ | ❌ |
| Manage Billing | ✅ | ❌ | ❌ |
| Delete Workspace | ✅ | ❌ | ❌ |
Best Practices
Role Assignment
- Assign minimum necessary permissions
- Use member role for view-only access
- Use admin role for project management
- Reserve owner role for workspace management
Security
- Regularly review member access
- Remove inactive members
- Monitor role changes
- Audit permissions regularly
Related Documentation
- Super Admin - Super admin role
- Whitelisting - Whitelisting accounts