# Roles and permissions

> Control what team members and clients can see and change with roles.

Last updated: 2026-10-11 | Canonical: https://omnisocials.com/help-center/organization/roles-permissions

Every member of your organization has one role. A role is a set of permissions that decides what the person can see and change. This article explains the built-in roles and each permission, and how to create, change and delete roles.

## Open the Roles page

1. Click your name at the bottom of the sidebar, then **Settings**.
2. Click **Roles**. If you belong to more than one organization, choose it in the switcher above the organization pages first.

The page lists each **Role** with its **Type** (**Team** or **Client**) and **Description**. **(your role)** marks your own role.

![Settings open on Roles: the admin and client roles and the custom analyst, editor and reviewer roles with their type and description](https://cdn.omnisocials.com/file/omnisocials-website-assets/help-center/organization/roles-permissions/roles.webp)

If you can't manage roles, the page shows **Your role** and **Your permissions** instead, with each permission marked **Allowed** or **Not allowed**.

## Built-in roles

Every organization starts with three roles:

- **Owner**: the person who created the organization. The owner has every permission and access to every workspace. You can't remove the owner, change their role, or give the owner role to someone else. It isn't listed on the Roles page.
- **Admin**: every permission and access to every workspace. Its permissions can't be changed.
- **Client**: the default role for clients. It lets them review posts and has no extra permissions.

You can't delete the admin or client role.

## Team roles and client roles

Each role has a type:

- **Team** roles are for members of your organization.
- **Client** roles are for external reviewers.

Client roles are reviewer roles. A client can always see the calendar and posts of their workspace, open posts waiting for their approval, comment on each channel's version, and approve or reject. Clients never create, publish or delete posts. The only extras a client role can allow are **Use the social inbox** and **View analytics**.

## Permissions

Team roles can allow any of these permissions:

- **Adjust organisation details**: change the organization's name and logo.
- **Manage billing**: see and change the plan, seats, credits, invoices and payment details.
- **Create workspaces** and **Delete workspaces**.
- **Add members** and **Remove members**: invite and remove team members and clients.
- **Manage workspace access**: choose which workspaces a member can access. Without it, a member can't change workspace access, including their own.
- **Update member roles**: change the role of other members and clients.
- **Create roles**: create new roles.
- **Update roles**: delete roles.
- **Create and schedule posts**: create, edit and schedule posts. Without it, the **Create Post** button is hidden.
- **Delete posts**: delete posts.
- **Use the social inbox**: open the Social Inbox and reply to messages.
- **View analytics**: open Analytics.
- **Manage API keys**: create, view and delete API keys and webhooks, and manage integrations.
- **Manage social channels**: connect and disconnect social accounts.

## Create a role

1. On the Roles page, click **New role**.
2. Enter a **Name**.
3. Optionally, enter a **Description**.
4. Under **Type**, choose **Team** or **Client**.
5. Under **Permissions**, turn on the switch of each permission the role allows. Team permissions are grouped in **Content**, **Channels and API**, **Team** and **Organisation**, and every switch starts off. A count shows how many are on. For a client role, the list is called **Extras for clients**.
6. Click **Create role**.

![The Create role window: name, description, the Team or Client type and a switch per permission in the Content, Channels and API, Team and Organisation groups](https://cdn.omnisocials.com/file/omnisocials-website-assets/help-center/organization/roles-permissions/create-role.webp)

You need the **Create roles** permission. You can only allow permissions that you have yourself.

## Change a role's permissions

1. On the Roles page, click the role.
2. Under **Permissions**, turn each permission's switch on or off.

Each change saves right away, and members with that role get the new permissions without reloading the page. Click the back arrow next to the role's name to return to the list.

![The editor role open in Settings, Roles: one switch per permission, with Create and schedule posts, Delete posts, Use the social inbox and View analytics turned on](https://cdn.omnisocials.com/file/omnisocials-website-assets/help-center/organization/roles-permissions/role.webp)

> **Note:** Only the organization owner can change a role's permissions. Nobody can change the admin role, and you can't change your own role.

## Delete a role

1. On the Roles page, click **...** on the role's row.
2. Click **Delete role**.
3. Click **Delete Role** to confirm.

You can't delete a role that's still assigned to someone. Give those members another role first. You need the **Update roles** permission.

## Assign a role

You pick a role when you invite someone, and you can change it later in the **Role** column on the Team or Clients page. To learn more, see [Manage your team](/help-center/organization/team-management).

## Up next

- [Approval workflows](/help-center/engagement/approval-workflow)
- [Billing and subscription](/help-center/organization/billing)