Back to Changelog

Role-based access control for organizations and teams

SecurityProduct

Owners, admins, members and viewers now have distinct permissions across the org. Teams add manager and member roles on top.

Organization roles

  • Owner. One per organization. Manages billing, can transfer ownership and has full access.
  • Admin. Manages members, teams and settings. Cannot transfer ownership.
  • Member. Uses the product day to day. Can create and edit their own work.
  • Viewer. Read-only access to dashboards and shared content.

Team roles

Inside a team you’re either a Manager, who can invite, configure and remove team members, or a Member.

What changed

  • Every API route is now gated by the caller’s permissions.
  • The members and teams pages show each person’s role, with a link to learn about roles.
  • Owners can transfer ownership to any active admin or member from the members table.