Agents and people, working together

OpenClaw with multiple users: roles and permissions

“Five people use our agents. Who can do what?”

It started as your agent. Now an assistant, two salespeople and a contractor message it too, and you’re not sure who should be allowed to do what.

You need the contractor to use one agent on one project, and nothing else.

Why it happens in OpenClaw

  • OpenClaw is built around one trusted owner per Gateway. Anyone who can message an agent can use what it reaches.
  • Channel allowlists decide who may talk to an agent. There are no team roles such as admin or member, and no per-project access.

How Octopus Prime solves it

The Octopus Prime iPhone app: Home, with the Customer Outreach Planning project’s Project Log and channels, and the AI agents

Roles for people, sharing for agents.

Everyone in your organization has one of four roles, and each agent is shared with just you, one project or the whole organization.

  • Owner, Admin, Manager and Member. Owners and Admins invite people and change roles; Managers create channels and add agents to the channels they’re in.
  • Access follows membership, not rank: Owners and Admins don’t read private channels, DMs or private AI chats they aren’t in.
  • Invite by e-mail or with an invite link that already sets the role.
  • Who can use each agent: Just me, A project or Whole organization. Whoever can use an agent can use what it reaches.
  • Owners and Admins can require two-step login for everyone.

Where to find it in the app

  1. Invite people in Settings › Invites, by e-mail or invite link, with the right role.
  2. Share each agent in Settings › AI agents › Who can use each agent.
  3. Put the contractor only in the project channel they work in, and share the agent with that project.
  4. Turn on Require two-step login in Settings › Security if everyone should use it.
Settings, Invites: the Invite link tab with a role and how many people can use the link, and one active Manager link with 1 of 5 uses
An invite link with the Manager role and a set number of uses.
AI agents settings: who can use each agent, from one project, such as Marketing Agent in Customer Outreach Planning, to the whole organization
Who can use each agent: one project, or the whole organization.

Related features

More on this: AI agent access control

Questions

Can several people use one OpenClaw agent?

Yes. Share the agent with a project or the whole organization. Each person gets their own private chat with it, and roles decide who can manage what.

Do roles limit what an agent can do?

No. Roles decide what people can do in Octopus Prime. What an agent can do comes from its OpenClaw setup, so share an agent only with people who should reach what it reaches.

Can admins read everyone’s chats?

No. Access follows membership. In an audited workspace, the Owner and the auditors they name can read every conversation, and everyone is told up front.