Members
Master member invitation workflows, Owner / Admin / Member role matrices, and cross-client access enforcement.
MuseCanto provides clear Role-Based Access Control (RBAC) for teams and enterprises, guaranteeing content assets remain secure, auditable, and strictly compartmentalized.
Role Permission Matrix (RBAC)
MuseCanto organizations support three standard roles:
| Operational Dimension | Owner | Admin | Member |
|---|---|---|---|
| Knowledge Base Document Read/Write | ✅ | ✅ | ✅ |
| Calendar Scheduling & Multi-Platform Matrix | ✅ | ✅ | ✅ |
| MCP Document Read/Write | ✅ | ✅ | ✅ (Plan required) |
| Invite / Remove Regular Members | ✅ | ✅ | ❌ |
| Modify Member Roles (Promote to Admin) | ✅ | ❌ | ❌ |
| Manage Billing & Team Seats | ✅ | ❌ | ❌ |
| Workspace Deletion / Asset Purge | ✅ | ❌ | ❌ |
Separation of Content & Billing Privileges
Standard members enjoy full co-authoring and matrix publishing access, but cannot view invoices, access payment methods, or modify subscription tiers.
Member Invitation Flow
Send Invitation
A workspace Owner or Admin navigates to Workspace Settings → Members, enters the invitee's email, and chooses an assigned role.
Receive & Confirm
The invitee receives an email with a cryptographically verified invitation link and clicks Accept Invitation.
Switch Context
Upon acceptance, the organization immediately appears in the invitee's Workspace Switcher in the top navigation.
Client Access Boundaries & Offboarding
MuseCanto enforces real-time authorization checks across all external interfaces:
- MCP Tool Execution: Every tool invocation validates the user's active session against the target
organizationSlug. - Immediate Offboarding Lockout: When an administrator removes a member, their active web session terminates and all MCP tokens immediately return
403 Forbiddenfor that organization's assets. - Personal Workspace Autonomy: Removing a member from an organization never impacts their personal workspace assets or private connected social accounts.