> Documentation index: [/llms.txt](/llms.txt). Every page as one file: [/llms-full.txt](/llms-full.txt).

# Set workspace roles for an organization

Set workspace roles for an organization [#set-workspace-roles-for-an-organization]

The organization's **Workspace roles** page sets what each workspace role can do in every workspace of the organization.

You must be an organization **Admin**. Open **Settings** > **Workspace roles** under **Organization · "*name*"**.

<img alt="The Workspace roles matrix of Acme Group with Member, Editor, Admin and the custom Analyst role" src="__img0" />

These are the roles people hold inside a workspace. The role someone holds in the organization itself is set on the **Roles** page; see [Set organization roles](/docs/platform/admin/organization/roles).

How the defaults apply [#how-the-defaults-apply]

| Level                        | Sets                                | Wins over         |
| ---------------------------- | ----------------------------------- | ----------------- |
| Platform defaults            | Member, Editor and Admin everywhere | —                 |
| This page                    | Every workspace of the organization | Platform defaults |
| A workspace's **Roles** page | That workspace only                 | This page         |

* A dot marks a cell you changed from the platform default.
* A change applies at once in every organization workspace, except where that workspace changed the same cell. See [Set roles and permissions](/docs/platform/admin/workspace/roles-and-permissions).
* Only the workspace permissions are listed here.

Change a role default [#change-a-role-default]

Check or clear the box for a permission and role. Select a cell with a dot again to return it to the platform default.

Create a custom role [#create-a-custom-role]

1. Select **New role**.

2. Enter a **Name**, up to 64 characters, and select **Create role**.

   <img alt="The New role dialog with the name Auditor" src="__img1" />

3. In the new role's column, check the permissions it should have.

* A new role starts with no permissions.
* It appears at once in every workspace of the organization: in the **Roles** matrix and in the role lists for members and invites.
* Its name cannot be changed later, and cannot be Member, Editor or Admin.

To delete a custom role, select the trash icon next to its name and confirm with **Delete role**. It is removed from every organization workspace. A role that a workspace member or pending invite still holds cannot be deleted: give them another role first.

Troubleshooting [#troubleshooting]

| Message                                                   | What to do                                                                    |
| --------------------------------------------------------- | ----------------------------------------------------------------------------- |
| **A role with this name already exists**                  | Pick another name.                                                            |
| ***n* workspace members or invites still hold this role** | Give those members another role, or revoke the invites, then delete the role. |

For every permission and its default per role, see the [permission matrix](/docs/api/workspaces/roles-and-permissions#permission-matrix) in the API documentation.