Roles and permissions
Decide who can see and change each part of your program. The same permissions apply in the app, over MCP, in the CLI, and through the API.
Roles
Owner
Holds the organization. Manages billing, settings, members, and every module.
Admin
Manages organization settings and members, and works across the modules.
Member
Does the day-to-day work in the modules the organization has turned on.
Viewer
Reads records without changing them.
Custom roles
Save your own set of permissions as a role and give it to members.
What's checked on every action
- 01
Membership
The person must still belong to the organization.
- 02
Active modules
The module must be turned on for the organization.
- 03
Permission
View permission allows reading. Manage permission also allows creating, changing, archiving, and deleting.
Ready to run risk and privacy in one place?
Book a walkthrough of the modules that match your program. Start with one, add more when you need them.