What can each role do?
Owner has full control including billing, workspace deletion and role changes. Admin can manage monitors, integrations, incidents and status pages, and can invite people, and can see billing but not change it. Member can view monitoring data and work incidents but cannot change configuration, invite anyone, or see billing.
Billing is an owner and admin surface end to end: invoice history, subscription state and payment-method details are not readable by a member. That is enforced on the server for reads as well as writes, so it holds for a direct API call, not just for what the interface chooses to render.
Role checks are enforced on the server for every mutating operation, not in the interface. Hiding a button is a usability decision; the authorization filter is the control.
How many people can I add?
One user on Free, 3 on Starter, 10 on Team. The limit counts accepted members plus outstanding invitations, so a pending invitation holds a seat until it is accepted, revoked or expires — revoke an unused invite to free the seat back up.
If you are at the limit, removing a member frees the seat immediately.
How do invitations work?
An owner or admin invites an email address and chooses the role. The invitee gets a link that is valid for a limited period and can be used once. Accepting it verifies the mailbox — the link was issued to that address — so an invited user does not do a separate email verification.
Someone who already has a PageLantern account keeps their existing password when they accept: an invitation link can never be used to overwrite an existing account’s credentials. Accepting an invitation is also the point at which the invited user accepts the Terms of Service for that workspace.
How do I protect the account itself?
Turn on multi-factor authentication for everyone with Owner or Admin rights. PageLantern supports TOTP authenticator apps, passkeys (WebAuthn), and SMS or email one-time codes, plus single-use recovery codes.
Prefer a passkey or an authenticator app over SMS. SMS one-time codes are better than nothing and much worse than the alternatives, because the carrier account they depend on is not something you control.