Roles and Permissions
Three roles keep access simple.
| Role | Best For | Can Do | Can’t Do |
|-------|----------|--------|----------|
| **Owner** | founders, finance | Everything Admins do plus manage billing, invoices, plan changes, delete workspace | Nothing (full control) |
| **Admin** | marketing leads, ops | Invite/remove members, change roles, create brands, connect accounts, edit prompts, change workspace settings | Manage billing, change their own role |
| **User** | analysts, clients, contractors | View everything, run prompts, query via MCP | Change settings, connect accounts, invite members, edit prompts |
Tips
- Start everyone as User; upgrade only when they need more power.
- Keep at least two Owners in case someone leaves unexpectedly.
- Review roles quarterly—permissions tend to expand over time if no one trims them.