Appearance

Users & access management ​

Users ​

When a user accepts an invitation, they become a Member of the organization. From that point on, they can interact with the organization’s resources according to their assigned role.

A user's role can be changed at any time. Similarly, a user can be removed (kicked) from the organization at any time.

Roles ​

Every user in an organization is assigned a role. We offer four roles, listed below in order of descending privilege:

NameDescription
OnwerHighest level of access. Full Administrative rights, including billing and ownership transfer.
AdminAdministrative role with broad permissions to manage users and content.
MemberContent-focused role with permissions to create and manage widgets, secrets, etc.
GuestRead-only role for limited access.

You can assign any combination of roles within your organization — for example, everyone can be a Guest or an Admin. Role assignment is not restricted by your plan.

The Owner Role ​

The Owner role is special and deserves particular attention:

  • There can be only one Owner per organization.
  • The Owner cannot change their own role, cannot leave the organization, and cannot be removed.
  • Ownership can be transferred to any other Member of the organization at any time.

WARNING

Transfer ownership with caution. Make sure you trust the person you're assigning it to. This action cannot be undone unless the new Owner transfers ownership back to you.

Permissions ​

Each role comes with a specific set of permissions. The table below outlines all supported actions along with the minimum required role needed to perform each.

NameDescriptionMinimal role
Organizations:ViewView organization detailsGuest
Organizations:EditEdit organization settingsAdmin
Organizations:InviteUserInvite users to the organizationAdmin
Organizations:RevokeInvitationRevoke user invitationsAdmin
Organizations:ViewInvitationsView sent invitationsGuest
Organizations:KickUserRemove a user from the organizationAdmin
Organizations:ViewMembersView organization MembersGuest
Organizations:ChangeUserRoleChange roles of other MembersAdmin
Organizations:TransferOwnershipTransfer organization ownershipOwner
Organizations:ViewSubscriptionView subscription and billing statusGuest
Organizations:ViewSubscriptionPaymentsView subscription paymentsOwner
Organizations:ManageSubscriptionManage billing and subscriptionOwner
Organizations:CreateAccessTokenCreate Public API access tokensMember
Organizations:DeleteAccessTokenDelete Public API access tokensMember
Organizations:ViewAccessTokensView Public API access tokensGuest
Files:ViewView filesGuest
Files:CreateCreate filesMember
Files:DeleteDelete filesMember
WidgetSecrets:ViewView widget secretsGuest
WidgetSecrets:CreateCreate widget secretsMember
WidgetSecrets:DeleteDelete widget secretsMember
Widgets:ViewView widgetsGuest
Widgets:ViewStatsView widget statisticsGuest
Widgets:CreateCreate new widgetsMember
Widgets:EditEdit existing widgetsMember
Widgets:PublishPublish widgetsMember
Widgets:ArchiveArchive widgetsMember
Widgets:UnarchiveUnarchive widgetsMember
Widgets:DeleteDelete widgetsAdmin
WidgetFlowEvents:ReadRead flow eventsGuest
WidgetFlowCollectedRecords:ReadRead collected recordsGuest