Back to changelog

Role-based access control for organizations and teams

Owners, admins, members, and viewers now have distinct permissions across the org. Teams add manager and member tiers on top.

We rolled out a full role system for Salesy organizations and teams.

Organization roles

  • Owner — one per organization. Manages billing, can transfer ownership, and has full access.
  • Admin — manages members, teams, and settings. Cannot transfer ownership.
  • Member — uses the product day to day. Can create and edit their own work.
  • Viewer — read-only access to dashboards and shared content.

Team roles

Inside a team you're either a Manager (can invite, configure, and remove team members) or a Member.

What changed

  • Every API route is now gated by the caller's permissions.
  • The members and teams pages show each person's role and surface a "Learn about roles" link to the docs.
  • Owners can transfer ownership to any active admin or member from the org members table.

Read the full role matrix in Security → Roles and permissions.