AdminOrganization

Set workspace roles for an organization

The organization's Workspace roles page sets what each workspace role can do in every workspace of the organization.

You must be an organization Admin. Open Settings > Workspace roles under Organization · "name".

The Workspace roles matrix of Acme Group with Member, Editor, Admin and the custom Analyst role

These are the roles people hold inside a workspace. The role someone holds in the organization itself is set on the Roles page; see Set organization roles.

How the defaults apply

LevelSetsWins over
Platform defaultsMember, Editor and Admin everywhere—
This pageEvery workspace of the organizationPlatform defaults
A workspace's Roles pageThat workspace onlyThis page
  • A dot marks a cell you changed from the platform default.
  • A change applies at once in every organization workspace, except where that workspace changed the same cell. See Set roles and permissions.
  • Only the workspace permissions are listed here.

Change a role default

Check or clear the box for a permission and role. Select a cell with a dot again to return it to the platform default.

Create a custom role

  1. Select New role.

  2. Enter a Name, up to 64 characters, and select Create role.

    The New role dialog with the name Auditor

  3. In the new role's column, check the permissions it should have.

  • A new role starts with no permissions.
  • It appears at once in every workspace of the organization: in the Roles matrix and in the role lists for members and invites.
  • Its name cannot be changed later, and cannot be Member, Editor or Admin.

To delete a custom role, select the trash icon next to its name and confirm with Delete role. It is removed from every organization workspace. A role that a workspace member or pending invite still holds cannot be deleted: give them another role first.

Troubleshooting

MessageWhat to do
A role with this name already existsPick another name.
n workspace members or invites still hold this roleGive those members another role, or revoke the invites, then delete the role.

For every permission and its default per role, see the permission matrix in the API documentation.

On this page