Members and roles

Members are the people who sign in to your console (Settings, Members).

Role	Can
Owner	Everything, including members.
Admin	Policies and browsers.
Read only	See everything, change nothing.

Invite someone by email with a role. The link lasts 7 days; resend or cancel it from the list.
Reset two-factor for someone who lost their authenticator app: they set it up again at their next sign-in.
Anyone can leave an organisation, except its last owner.