Team & Members

Available via: Dashboard only

Inflow accounts can have multiple members. Each member signs in with their own email and inherits permissions from a role — one of the four built-in roles below, or a custom role with a permission set you define.

Roles

Inflow has four built-in organization roles. The list below is ordered from most to least privileged.

Role	What they can do
Owner	Full control of the account. Only role that can promote another member to Owner, change the Payout Policy, and delete the account. There is exactly one Owner per account. Can be a payout-policy signer.
Admin	Everything the Owner can do except the payout policy: request, approve, and execute payouts, add/remove bank or wallet destinations, rotate API keys, manage members and roles (cannot promote to Owner), and configure integrations. Can be a payout-policy signer.
Member	Day-to-day operator. Full access to payments and operations: subscriptions, offers, payment links, coupons, refunds, and customers. Read-only on balances, payouts, and team members. No access to API keys or the payout policy. Cannot be a payout-policy signer.
Viewer	Same operational access as Member (can still manage subscriptions, offers, refunds, and customers), minus swaps. Read-only on balances, payouts, and team members; no access to API keys or the payout policy. For a strictly read-only teammate, use a custom role instead.

For the exact permission matrix behind each role — and how to create custom roles with granular read/write access per resource — see Roles & Permissions.

Owner and Admin are the only roles that can be picked as signers in the Payout Policy. Demoting a signer below Admin automatically removes them from the signer list and may trigger the payout security lock.

Roles are enforced server-side on every dashboard call. Some sensitive actions are additionally gated by step-up Two-Factor & Security — see that page for the exact list.

Inviting a Teammate

Go to Settings → Members in your Dashboard.
Click Invite Member.
Enter their email and select a role.
Inflow sends them an invitation email with a sign-up link.
Once they accept, they appear in the members list with the role you chose.

Pending invitations can be revoked at any time before they are accepted.

Changing a Role

Find the member in Settings → Members.
Click their current role and pick a new one.
The change applies immediately on their next dashboard request.

If you downgrade a member who was a signer in your Payout Policy, they are removed from the signer list and the policy may temporarily clamp the required-approvals count. Inflow will warn you before saving.

Removing a Member

Find the member.
Click Remove.
Confirm — the member loses access immediately. Their existing audit trail (payouts approved, refunds issued, etc.) is preserved.

Best Practices

Use Admin sparingly. Reserve it for people who need to rotate API keys, manage payout destinations, or trigger withdrawals.
Use Member for product / ops work. For finance, accounting, or analytics teammates who should only see what's happening, create a read-only custom role — the built-in Viewer role can still manage operational data like subscriptions and refunds.
Pair role changes with rotation of any keys the leaving teammate had access to.
Configure Payout Policy so that high-value withdrawals require multiple approvals — even Admins should not be able to drain the balance alone.