What owners and members can each do
The two CodeQR roles and exactly what each one reaches — links, domains, billing, API keys and the audit log — plus what is not recorded anywhere.
CodeQR has two roles, and the honest summary is that a member can do most of the daily work while an owner controls the things that cost money or change the workspace itself.
Availability
- Plan: every plan. Roles apply regardless of plan.
- Where: Settings → People, on each person's row.
What a member can do
- Create, edit, archive and delete links, QR codes and pages — including changing where a link already in circulation points.
- Create and delete folders and tags.
- Create API keys.
- Read Analytics and Events.
What only an owner can do
- Invite and remove people, and change roles.
- Add, verify and remove domains.
- Rename, transfer or delete the workspace.
- Manage webhooks and OAuth apps.
- Turn on conversion tracking at workspace level.
- Open the audit log.
The two things to know before assigning roles
A member can change a destination. Editing a link is daily work, and it is also how a QR code already printed on packaging starts pointing somewhere else. That is not a defect — it is the feature — but it means "member" is not a read-only role. There is no viewer role today.
A member can reach billing. Some billing screens are not restricted by role, including the flow that opens the subscription cancellation portal. Treat membership as trusted access, and give it to people you would trust with the subscription.
What is not recorded
The audit log covers 24 actions, and none of them is about your team: invitations, removals, role changes, folder and tag deletions and workspace settings leave no trail. If you need to know who invited whom, that history does not exist today.
The log is available from the Business plan and keeps 12 months; exporting it is an Enterprise feature.
Changing someone's role
- Open Settings → People.
- On the person's row, open the options and choose the role.
A change takes effect on the person's next request. Their open screens may take a few seconds to catch up.
Verify it works
The cheapest check is to have the person try the action. A member who opens Settings sees the sections but cannot save the ones reserved to owners; the audit log tab is the one that disappears entirely.
Troubleshooting
I need a read-only role
There is none. Anyone you add can edit links. If someone should only look at numbers, share a report rather than adding them to the workspace.
A member says they cannot add a domain
Correct — domains are owner-only. Ask an owner, or promote the person.
I am the only owner and I am leaving
Promote someone else to owner first, then remove yourself. There is no ownership transfer step — see Rename, transfer or delete a workspace.
Who deleted this link
The audit log does not record link deletion by person in a way that answers this reliably, and it records nothing about team changes at all. Ask the team.
Can I restrict a folder to some people
Not today. Folder-level access exists in the data model but has no interface, so every person in the workspace sees every folder.