# Roles and permissions

What members, admins and owners can do, who can change whose role, and what members see on admin pages.

Every member of an organization has one role: **Member**, **Admin** or
**Owner**. Change roles on **Settings → Members**. See
[Manage workspace settings](/articles/manage-workspace-settings#members).

## What each role can do

| Action | Member | Admin | Owner |
| --- | :---: | :---: | :---: |
| See Home, Insights and the explorer | Yes | Yes | Yes |
| Read and reply in the inbox, add notes, change status, snooze, archive | Yes | Yes | Yes |
| Delete conversations and run **Auto-resolve** | Yes | Yes | Yes |
| Approve or deny the agent's tool calls, and run tools on a conversation | Yes | Yes | Yes |
| Reach out to customers, edit and delete customers, remove learned facts | Yes | Yes | Yes |
| File, edit, triage, merge and delete signals, and confirm fixes | Yes | Yes | Yes |
| Read the knowledge library | Yes | Yes | Yes |
| Use the assistant, and link a Slack or Discord account to it | Yes | Yes | Yes |
| See who is in the organization, and leave it | Yes | Yes | Yes |
| View **Logs**, and the **Activity log** dataset in the explorer | No | Yes | Yes |
| Manage the plan, credits, add-ons and payment method | No | Yes | Yes |
| Edit the agent's profile, behavior, tools and suggested tools | No | Yes | Yes |
| Add, edit and delete knowledge, connect sources, review suggestions | No | Yes | Yes |
| Change the feedback board's settings | No | Yes | Yes |
| Connect Linear or GitHub issues on **Signal → Integrations** | No | Yes | Yes |
| Turn on email, and connect Discord and Slack | No | Yes | Yes |
| Rename the organization, change its slug and picture, change **Site** | No | Yes | Yes |
| Invite people, change roles, remove people | No | Yes | Yes |
| Create and revoke Median keys, manage webhooks and MCP connections | No | Yes | Yes |
| Delete the organization | No | No | Yes |

The assistant acts with the role of the person talking to it. A member who
asks it to rename the organization gets the same refusal the page would give.

## Who can change whose role

| Rule | Error |
| --- | --- |
| You cannot give a role above your own. Only an owner can make someone an owner | Only an owner can make somebody owner. |
| You can change or remove only people who rank below you. Owners can change or remove anyone, including other owners. So an admin can make a member an admin, but cannot touch another admin | You cannot manage admins. |
| You cannot change your own role | You cannot change your own role. Ask another owner, or leave from settings. |
| The last owner cannot leave | Assign another owner before leaving this organization. |

A role change applies to the person's next action. Nobody has to sign out.

## What members see on admin pages

Some pages are hidden from members. Others stay visible and read only.

| Page | A member sees |
| --- | --- |
| **Logs** | The row stays in the sidebar. The page says **Only admins and owners can see logs.** |
| **Agent** | Profile, Behavior and Tools, locked, with **Only admins and owners can change these settings.** Suggested tools are hidden |
| **Knowledge** | The library and documents, read only. The add buttons and **Review** are hidden. **Sources** says **Only admins and owners can manage sources.** A new document says **Admin access required**. **API reference** says **Only admins and owners can change these.** |
| **Signal → Integrations** | Hidden |
| **Site** | Read only. **Overview** says **Only admins and owners can change these settings.**, **Customize** says **Only admins and owners can change how the site looks.**, and **Sign-in** says **Only admins and owners can change how visitors sign in.** |
| **Signal → Board settings** | Read only, with **Only admins and owners can change these.** |
| **Channels** | Each channel's status, without its controls |
| **Settings → General** | Locked name, slug and picture. **Delete this organization** shows for owners only |
| **Settings → Billing** | Hidden |
| **Settings → Members** | The member list. **Invitations** and the controls on each row are hidden |
| **Settings → API** | Hidden |

The command palette leaves out the hidden pages too.

Access messages and what to do about them are in
[Fix access and invitation problems](/articles/fix-access-and-invitation-problems).