Roles and permissions
Each person in an organization workspace has one role. Roles decide who can change your DNS and who manages the team.
Permission matrix
| Capability | Viewer | Member | Admin | Owner |
|---|---|---|---|---|
| View dashboards, reports and alerts | Yes | Yes | Yes | Yes |
| Add and verify domains | No | Yes | Yes | Yes |
| Change hosted records and policies | No | Yes | Yes | Yes |
| Delete domains | No | No | Yes | Yes |
| Invite members and viewers | No | No | Yes | Yes |
| Invite an admin | No | No | No | Yes |
| Change roles, remove people | No | No | No | Yes |
| Edit extra alert recipients | No | No | Yes | Yes |
| Client compliance report (Agency plan) | No | No | Yes | Yes |
| Move a domain out of the workspace | No | No | No | Yes |
| Billing, and deleting the organization | No | No | No | Yes |
Member or admin
A Member does the operational work: adding domains, fixing senders, moving the policy up the ladder. An Admin can also delete domains and bring people into the team. A Viewer reads everything and changes nothing, which suits a client or an auditor.
The owner
The owner is the account whose plan the workspace runs on and who is billed for it. Only the owner changes roles, invites or removes an admin, and deletes the organization. An owner cannot simply leave: the workspace needs an owner.
Ownership can be transferred to someone who is already a member of the workspace. The new owner's plan then governs the workspace, and the previous owner stays on as an Admin. There is no button for this in the dashboard yet; contact us to arrange a transfer.