Roles and permissions

Every member holds one workspace role: Owner, Admin, or Member. That role decides what they can change in this admin console. It doesn't decide which areas they can open, that's a separate per-member, per-area toggle on the People page.

The three roles

• Owner: full control, including deleting the workspace and transferring ownership. Exactly one per workspace; an owner can't be demoted or edited from a teammate's row.
• Admin: can invite members, change roles (other than the owner's), grant or remove area access, manage billing, SSO, and API keys.
• Member: no admin access here. What they can use depends entirely on which areas an owner or admin has granted them.

Change someone's role

1. Open People and find their row.
2. Use the role dropdown on the right to switch between Member and Admin.

Only owners and admins can do this, and neither the owner's row nor your own row shows the control.

Area access is per member, not per role

Each member's row on People lists every area your workspace is entitled to, with a toggle per area. Turning one on is what actually lets that person open it, and it's what counts against any seat limit your plan sets for that area. Being an Admin doesn't automatically grant access to every area, admin is about managing the workspace, not about using every product in it.

PII access

A separate toggle next to each member controls whether they can reveal sensitive contact fields in Audience. It's off by default for everyone, including admins, and has to be turned on explicitly.