# Manage Member Workspace Policy


This guide explains how to manage members and configure their individual workspace policy for each workspace.

## Overview

The **Users** tab in the **Access Management** section lets you:

- View member details, upgrade or downgrade their [organization role]({{< ref "access-management/member-management.md#member-roles" >}}), or remove them from the organization
- Customize a member's [workspace policy](#configure-member-workspace-policy)
- Manage [group membership](#manage-group-members)

### Plan-wise limits

The number of members Admins can invite to a workspace depends on the [RudderStack plan](https://www.rudderstack.com/pricing/):

| Plan | Member limit |
| :--------- | :------- |
| Free | 10 members per organization |
| Growth | Unlimited |
| Enterprise | Unlimited |

See the [Plan-wise Features]({{< ref "access-management/plan-wise-features.md#member-management" >}}) guide for more details.

## Configure member workspace policy

{{< warning >}}
When you upgrade a user from **Org Member** to **Org Admin**, RudderStack deletes their existing Member Workspace Policies instead of storing them as dormant policies.

If you later downgrade the same user back to **Org Member**, you must set up their workspace policies again.
{{< /warning >}}

1. Go to **Settings** > **Access Management** and click the **Users** tab.
2. Select the member for which you want to configure the workspace policy.
3. Under the **Member Workspace Policies** tab, select the workspace for which you want to configure the member policy.

{{< image src="images/access-management/member-policy-select-workspace.webp" alt="Select workspace to configure user permissions" >}}

4. [Configure the workspace policy]({{< ref "access-management/policies-overview.md" >}}) for the member.

{{< info >}}
You may see some permissions with a green check mark. These indicate permissions inherited from the [Baseline Workspace Policy]({{< ref "access-management/baseline-workspace-policy.md" >}}) and [Group Workspace Policies]({{< ref "access-management/groups.md" >}}) of which the member is a part.

As all members inherit permissions from the [Baseline Workspace Policy]({{< ref "access-management/baseline-workspace-policy.md" >}}) and any [Group Policies]({{< ref "access-management/groups.md" >}}), these inherited permissions **cannot** be changed or removed. However, you can configure **additional** permissions for the member.
{{< /info >}}

5. Click **Save** for the changes to take effect.

A sample member workspace policy is shown below:

{{< image src="images/access-management/sample-member-workspace-policy.webp" alt="Individual permissions policy" >}}

## Manage group members

{{< readfile "/includes/access-management/manage-members.md" >}}