Roles and permissions

Compare roles before inviting someone or changing their access. The permission table under Organization Settings > Roles shows the permissions assigned to each role.

Viewing roles requires roles:read. Assigning a member's role requires members:manage. Creating custom roles requires the Business plan or above and roles:manage.

Built-in roles

The built-in roles below are available on every plan. They can't be edited or deleted. Your plan still limits which features each role can use.

Capability	Owner	Admin	Editor	Viewer
Read documents, spaces, objects, icons and templates	Yes	Yes	Yes	Yes
Read members, teams, roles, billing and cloud information	Yes	Yes	Yes	Yes
Create, edit and delete documents	Yes	Yes	Yes	No
Manage spaces, objects, icons and templates	Yes	Yes	Yes	No
Manage cloud connections	Yes	Yes	Yes	No
Use AI	Yes	Yes	Yes	No
Request and decide document reviews	Yes	Yes	Yes	No
View and run interviews	Yes	Yes	Yes	No
Manage interview kits and settings; access results across interviews	Yes	Yes	No	No
Manage organization settings, members, teams and roles	Yes	Yes	No	No
Manage billing, integrations and SSO	Yes	Yes	No	No
Read the security audit log	Yes	Yes	No	No

Viewer can read billing and member information.

Editors can view interviews where they're on the panel. To run an interview, you must be assigned as an interviewer on its panel, even as an Owner or Admin. Who sees results depends on the interview's blind scoring rules.

Change a member's role through the Role dropdown under Users, as described in members and teams. Owner can't be assigned through this dropdown or an invitation.

Create a custom role

1. Open the organization name in the sidebar, then select Organization Settings > Roles. Select Create Role.
2. Enter a Role Name and, optionally, a Description.
3. Select the required Permissions.
4. Select Create Role, then assign it to a member under Users.

Custom roles can't receive the permissions to delete or transfer the organization. Those are restricted to Owner.

Editing or deleting a custom role requires roles:manage. Use its pencil icon to change the permissions, then select Save Changes. The changes affect members who hold that role.

To remove a custom role, select its trash icon and confirm Delete. Members who held the deleted role become Viewers.