Roles and permissions explained

When you invite team members, their role controls what they may do:

• Owner — full access including billing, deletion and ownership. There is always one owner; ownership is moved with Transfer ownership.
• Admin — everything except ownership and the payment card. Can view and download invoices, but can't change plan or card.
• Developer — API keys, logs, usage and webhooks.
• Viewer — read-only access to everything except billing.
• Billing — billing and invoices only, not keys.
• Analyst — read-only + audit log.

If you need something else, you can create your own roles under Roles & permissions in the workspace settings.

Choose the smallest role that does the job — it keeps the account safe. You can always raise a role later.

How to invite: see [Invite team members](inviter-teammedlemmer).