Roles & permissions
Five roles, ordered from most to least power. Default new members to contributor and tighten from there if needed.
The five roles
- Owner
- The workspace creator. Full control of everything; manages billing; can transfer ownership.
- Admin
- Full operational control except removing the owner. Can invite, change roles, manage projects, and edit settings.
- Manager
- Can invite and remove non-admins; can create and manage projects.
- Contributor
- Can do work — create tasks, edit files, talk to Tori. Can't invite or change settings.
- Viewer
- Read-only. Sees what they're permitted to see, but can't edit. Useful for advisors, auditors, or stakeholders.
Who can do what
A few specific rules worth knowing:
- The owner can't be removed by anyone — only transferred or self-deleted.
- Admins can't demote other admins or the owner.
- Managers can't invite at the admin role.
- Contributors and viewers can't change anyone's role.
Changing a role
Open People → [member] → Change role. Pick the new role and confirm. The change takes effect immediately and sends an in-app notification to the affected member.
Note
For audit purposes, role changes are logged. School-plan workspaces can export this audit log from Admin console.
Removing a member
From People → [member] → Remove. They lose workspace access immediately. Their work (tasks, files, comments) stays in place; you can reassign tasks they owned to someone else.
Tip
Departing-member checklist: reassign open tasks, transfer files they owned, revoke any external integration tokens they set up, and confirm they're removed from your billing seat count.