# Organization members

Owners and admins manage who belongs to an organization on its **Members**
tab, `/orgs/<handle>/members`.

## Roles

| Role                 | Access                                                           |
| -------------------- | ---------------------------------------------------------------- |
| Owner                | Everything, including billing and closing the organization       |
| Admin                | Manage members, teams, settings and repositories                 |
| Member (write)       | Write access to the organization's repositories                  |
| Member (read)        | Read access to the organization's repositories                   |
| Member (no access)   | Only what teams and repositories grant directly                  |
| Outside collaborator | Not a member; access only to the repositories they were added to |

Members also get the organization's
[default repository permission](https://staging.git.cafe/docs/organizations/organization-settings.md#general-settings),
and [teams](https://staging.git.cafe/docs/organizations/teams.md) or individual repositories can grant more.

## Apps

Below the members, **Apps** lists the bot of each
[installed app](https://staging.git.cafe/docs/integrations/apps.md#bots-where-people-work): its app and
publisher, who installed it, the repositories it can reach and when it was
last issued a token (**Last token issued**; a token is not proof the bot did
anything). Owners and admins see the repositories' names; other members see how
many. Bots take no seat and have no role: what they may do is the app's
permissions on the repositories you selected for it.

## Invite a member

1. Choose **Invite member**.
2. Enter a GitCafe handle or an email address, and choose a role.
3. Send the invitation.

The invitee receives an email. Pending invitations appear under the member list
with their role and expiry, and can be revoked there.

```sh
cafe org invitation create acme alice --role org-member-write
```

## Accept an invitation

Open the link in the invitation email and sign in with the invited account.
Choose **Accept invitation**, then **Go to organization**.

An invitation sent to an email address can be accepted only once that address
is verified on your account. If the page says the invitation expired, was
revoked or was already used, ask an owner or admin for a new one.

## Change a role or remove a member

Choose a new role from the member's **Role** menu, or remove them with the bin
icon and confirm. The last owner cannot be demoted or removed, and you cannot
remove yourself here. Removing a member does not delete repositories.

```sh
cafe org member set acme alice --role org-admin
cafe org member remove acme alice --yes
```

## Leave an organization

Ask an owner or admin to remove you. If you are the only owner, make someone
else an owner first.