Members & Roles

Team management in alice is built around your Slack workspace. Anyone from the same Slack workspace who signs into alice is automatically added to the organization. Roles control what each person can see and do.

The Members Table

The Members page shows a table of all workspace members:

Members are listed with the owner first, then admins, then members, all sorted alphabetically within each role group.

Roles

alice has three roles, each with progressively more permissions:

Member

The default role for anyone who joins. Members can use alice day-to-day but cannot change workspace configuration.

Can do:

• View the dashboard, all skills, sources, and logs
• Run skills via slash commands
• Execute actions on skill results
• Create and edit skills

Cannot do:

• Delete skills
• Manage sources (connect/disconnect)
• Manage scheduled reports and monitors
• Manage team members
• Access billing

Admin

Admins have full operational control over the workspace. They can manage everything except billing and ownership.

Can do (in addition to member):

• Delete skills
• Manage sources (connect and disconnect)
• Manage scheduled reports and monitors
• Manage team members (promote, demote, remove)
• Edit workspace settings (name, timezone)

Cannot do:

• Manage billing
• Delete the workspace
• Transfer ownership

Owner

The owner has complete control over the workspace. There is exactly one owner per workspace.

Can do (in addition to admin):

• Manage billing and subscription
• Delete the workspace
• Transfer ownership to another member

Full Permission Matrix

Auto-Join via Slack

alice does not have a traditional invite flow. Instead, workspace membership is determined by your Slack workspace:

1. A user signs into alice using Continue with Slack
2. alice reads the team_id from the Slack OAuth response
3. If an alice workspace exists for that team_id, the user is automatically added as a member
4. If no workspace exists, a new one is created and the user becomes the owner

This means:

• Anyone in your Slack workspace can join your alice workspace by signing in -- no invite link or email needed
• Membership is automatic -- when a colleague signs up, they appear in your Members list immediately
• You cannot add members manually -- they must sign in through Slack themselves
• You cannot prevent specific Slack members from joining -- all Slack workspace members have access

This design eliminates the friction of invite flows and ensures that everyone who needs access can get it without waiting for an admin.

Managing Roles

Admins and owners can change member roles from the Members page:

Promoting a Member to Admin

1. Go to Dashboard > Settings > Members
2. Find the member in the table
3. Click the actions menu (three dots) on their row
4. Select Make admin
5. The role badge updates immediately

Demoting an Admin to Member

1. Go to Dashboard > Settings > Members
2. Find the admin in the table
3. Click the actions menu
4. Select Make member
5. The role badge updates immediately

Role changes take effect immediately. The affected user's permissions update on their next request -- they do not need to sign out and back in.

Removing a Member

1. Go to Dashboard > Settings > Members
2. Find the member in the table
3. Click the actions menu
4. Select Remove
5. Confirm the removal

Removed members lose access to the alice dashboard and cannot run slash commands. However, because of the auto-join behavior, they can rejoin by signing in again through Slack. To permanently prevent access, you would need to remove them from the Slack workspace itself.

Skills, scheduled reports, and other resources created by the removed member are preserved and remain owned by the workspace.

Transferring Ownership

Only the current owner can transfer ownership to another member. This is a significant action that changes who controls billing, workspace deletion, and ownership transfer.

Steps to Transfer

1. Go to Dashboard > Settings > Members
2. Find the target member in the table
3. Click the actions menu
4. Select Transfer ownership
5. A confirmation dialog appears explaining the implications
6. Type "transfer" exactly in the confirmation field
7. Click Confirm transfer

What Happens After Transfer

• The target member becomes the new owner
• The previous owner is demoted to admin (not member -- they retain operational permissions)
• Billing contact and subscription management transfer to the new owner
• All other settings, skills, sources, and data remain unchanged
• The transfer is logged in the audit trail

Transfer Requirements

Role Enforcement

Roles are enforced at the database level using Row Level Security (RLS) policies. This means role checks cannot be bypassed through the UI or API:

• Read access -- All members can view resources in their workspace
• Write access -- Members can create skills and skill runs
• Admin access -- Sources, scheduled reports, monitors, and member management require admin or owner role
• Owner access -- Billing and workspace deletion require owner role

Both the dashboard UI and the Slack bot respect these role boundaries. An attempt to perform an unauthorized action returns a permission error.

Next Steps

• Workspace Settings -- General workspace configuration
• Billing -- Plan and subscription management (owner only)
• Security -- Audit logs track all role changes
• Slack Installation -- How Slack workspace membership maps to alice
• Plans Reference -- Features available on each plan tier