Members and roles

An organization role determines which team matters a person can manage; a project role determines what they can do in a particular project. Confirm both layers when assigning permissions to colleagues.

Organization roles

Each organization has exactly one Owner. Go to Profile → Organization → Member management to view members and direct invitations awaiting acceptance.

The Owner can manage other organization roles. Admins can invite or manage only Members and, on Cloud, Guests. Transferring ownership is a separate action; another Owner cannot be assigned through the regular role dropdown.

On Cloud, Owners, Admins, Members, and Guests occupy member slots; Billing Admins and disabled members do not. Unexpired direct invitations reserve slots, except Billing Admin invitations. Private deployments use the license's global user limit. Disabling an organization member does not delete the account or free a global user slot.

Project roles

A regular organization member's effective project permissions come first from an explicit project role, then from a public project's default role. Without either, they cannot enter. Guests use only explicit roles; Billing Admins cannot become project members. Organization Owner/Admin governance does not grant access to private project content. Cloud system administrators' global operational permissions apply separately.

In Project settings → Project members, or project details under Organization → Project management, select multiple active organization members and assign project Admin or Member. After removing an explicit membership record, a public project may still allow access through its default role. See Invite members for steps.

Disable members

Disabling removes organization and project access while preserving the membership record and historical content. Readmit members through the organization invitation process; reimporting from WeCom or WPS does not automatically restore a disabled membership.

Organization member management handles memberships and organization roles only. It does not change account email addresses, passwords, or system administrator status, or delete global accounts. Those account operations belong to system administrator user management.

Transfer organization and project ownership

Before leaving an organization, its Owner must transfer ownership to an active Admin or Member through Member management. The former Owner then becomes an Admin. Users linked only to WeCom/WPS without email credentials cannot become organization Owners.

If a member still owns any project, they cannot be directly disabled, leave the organization, have their account deleted, or become a Billing Admin. Transfer each project first. The recipient must be an active Admin or Member who has explicitly joined the project; after transfer, the former owner becomes a project Admin.

Organization page permissions

Organization management pages are not shown to Members or Guests. Private deployments do not provide Billing Admins, Guests, or the Cloud usage page.