Roles and access control

Every person in your workspace has one of two roles: Owner or Member. Your role controls what you can see and change, from managing the team roster to running agents on cloud desktops.

The two-role model

MultiClaw uses a flat, two-role model. There are no custom roles or granular permission tiers. This keeps the access model easy to understand and reduces the chance of misconfiguration.

Owner

The Owner is the person who created the workspace. Each workspace has exactly one Owner. Beyond everything a Member can do, the Owner manages who has access: inviting new members, removing existing ones, and viewing the full member list.

Ownership cannot be transferred through the interface. If you need to change who owns the workspace, contact MultiClaw support.

Member

A Member is anyone the Owner invites into the workspace. Members have full access to the workspace's agents, tasks, cloud desktops, skills, guardrails, and Quick Chat. They can approve agent plans and view the audit trail.

Members cannot invite or remove other people. If a Member tries to access the Users page, they see a permission error.

How roles connect to governance features

Your role does not limit what you can do with agents and tasks. Both Owners and Members create tasks, review agent plans, and approve or reject execution. The approval flow is a governance control that applies equally to everyone in the workspace.

The audit trail is also visible to both roles. Every action taken in the workspace — task creation, plan approval, agent execution — is logged and visible to all members. The Owner does not have a separate or more detailed audit view.

Manage members

Only the Owner can add or remove people. Open MultiClaw Cloud and go to your workspace's Users page (/{your-workspace}/users). From there you can:

1. Invite a new member by entering their email address.
2. Remove an existing member by selecting them from the list.

When you remove a member, they lose access to all workspace resources immediately. Their past actions remain in the audit trail.

No guest or anonymous access

Everyone who accesses your workspace needs a MultiClaw account. The Owner must invite each person as a Member before they can see any workspace resources. There is no guest role, temporary access, or public link that bypasses this requirement.

If someone outside your organization needs access, ask the Owner to invite them. That person will need a MultiClaw account to accept the invitation.

Security considerations

The two-role model is intentionally simple. A flat structure means there are no hidden permissions, no role inheritance chains, and no risk of accidentally granting elevated access through a misconfigured custom role.

Because only the Owner can change the member list, a compromised Member account cannot escalate its own access or invite unauthorized users. If you suspect unauthorized access, the Owner should remove the affected member from the Users page and ask them to reset their password.