Members
Management → Members (owner only).
Invite
Invite member — email and role owner / devops / manager. If the person is not in the system yet, the console shows a link you must send (no email is sent automatically). Until they register, the invite sits in a pending block; you can revoke it.
Role changes inline in the table. A deactivated member loses this workspace but may keep another.
You cannot change the role of the last owner.
The admin role is not assignable via invite — that is platform staff, not a tenant member.