Roles and permissions

Every member of your organization has one role. A role is a set of permissions that decides what the person can see and change. This article explains the built-in roles and each permission, and how to create, change and delete roles.

Open the Roles page

1. Click your name at the bottom of the sidebar, then Settings.
2. Click Roles. If you belong to more than one organization, choose it in the switcher above the organization pages first.

The page lists each Role with its Type (Team or Client) and Description. (your role) marks your own role.

If you can't manage roles, the page shows Your role and Your permissions instead, with each permission marked Allowed or Not allowed.

Built-in roles

Every organization starts with three roles:

• Owner: the person who created the organization. The owner has every permission and access to every workspace. You can't remove the owner, change their role, or give the owner role to someone else. It isn't listed on the Roles page.
• Admin: every permission and access to every workspace. Its permissions can't be changed.
• Client: the default role for clients. It lets them review posts and has no extra permissions.

You can't delete the admin or client role.

Team roles and client roles

Each role has a type:

• Team roles are for members of your organization.
• Client roles are for external reviewers.

Client roles are reviewer roles. A client can always see the calendar and posts of their workspace, open posts waiting for their approval, comment on each channel's version, and approve or reject. Clients never create, publish or delete posts. The only extras a client role can allow are Use the social inbox and View analytics.

Permissions

Team roles can allow any of these permissions:

• Adjust organisation details: change the organization's name and logo.
• Manage billing: see and change the plan, seats, credits, invoices and payment details.
• Create workspaces and Delete workspaces.
• Add members and Remove members: invite and remove team members and clients.
• Manage workspace access: choose which workspaces a member can access. Without it, a member can't change workspace access, including their own.
• Update member roles: change the role of other members and clients.
• Create roles: create new roles.
• Update roles: delete roles.
• Create and schedule posts: create, edit and schedule posts. Without it, the Create Post button is hidden.
• Delete posts: delete posts.
• Use the social inbox: open the Social Inbox and reply to messages.
• View analytics: open Analytics.
• Manage API keys: create, view and delete API keys and webhooks, and manage integrations.
• Manage social channels: connect and disconnect social accounts.

Create a role

1. On the Roles page, click New role.
2. Enter a Name.
3. Optionally, enter a Description.
4. Under Type, choose Team or Client.
5. Under Permissions, turn on the switch of each permission the role allows. Team permissions are grouped in Content, Channels and API, Team and Organisation, and every switch starts off. A count shows how many are on. For a client role, the list is called Extras for clients.
6. Click Create role.

You need the Create roles permission. You can only allow permissions that you have yourself.

Change a role's permissions

1. On the Roles page, click the role.
2. Under Permissions, turn each permission's switch on or off.

Each change saves right away, and members with that role get the new permissions without reloading the page. Click the back arrow next to the role's name to return to the list.

Delete a role

1. On the Roles page, click ... on the role's row.
2. Click Delete role.
3. Click Delete Role to confirm.

You can't delete a role that's still assigned to someone. Give those members another role first. You need the Update roles permission.

Assign a role

You pick a role when you invite someone, and you can change it later in the Role column on the Team or Clients page. To learn more, see Manage your team.

Up next

• Approval workflows
• Billing and subscription