Roles & permissions
Every workspace, agency, and enterprise role and what it can do.
Last updated 2026-07-01
Team Workspace roles
| Role | Can do |
|---|---|
| Owner | Everything: invite or create members, manage roles, transfer, archive. |
| Admin | Invite or create members, manage roles and settings; run analyses. |
| Manager | Create and manage shared analyses and reports; cannot add members. |
| Analyst | Run analyses and view shared results. |
| Viewer | Read-only access to analyses and reports. |
Agency roles
| Role | Can do |
|---|---|
| Agency Owner | Full control: clients, members, budgets, settings, transfer. |
| Agency Director | Manage clients, members, and budgets (not ownership transfer). |
| Account Manager | Manage assigned clients and run analyses for them. |
| Strategist | Run analyses in assigned clients. |
| Analyst | Support role; view analyses. |
| Viewer | Read-only. |
Enterprise roles
| Role | Can do |
|---|---|
| Enterprise Owner | Full control: link agencies/teams, transfer ownership. |
| Executive Admin | Manage members and settings; generate briefings. |
| Department Director | Oversee department analytics; manage linked containers. |
| Department Manager | Run analyses within departments. |
| Executive Viewer | Read-only executive dashboards. |
Platform admins are separate
The internal super_admin / ops_admin roles govern the Control Center, not customer containers. See Admin — Control Center.