Roles & permissions — who can do what.
Four roles — Owner, Admin, Editor, Viewer — and exactly what each one can do, in one table. Plus brand access, the second layer that decides which brands a role applies to.
Every teammate has exactly one role, and the role decides what they can do everywhere in your account. There are four: Owner, Admin, Editor and Viewer. This is the full reference.
The four roles
- Owner — the person who pays. All access, all brands, plus billing. There is exactly one, and it can't be removed or reassigned from inside the app.
- Admin — a trusted right hand. Everything the owner can do, except billing.
- Editor — a maker. Creates and edits content, brands, competitors and voice.
- Viewer — an observer. Reads everything, changes nothing.
What each role can do
Roles build on each other — an Admin can do everything an Editor can, and more. A dash means "no".
| Can… | Viewer | Editor | Admin | Owner |
|---|---|---|---|---|
| See everything — brands, competitors, briefs, content, visibility | Yes | Yes | Yes | Yes |
| Generate & edit content — Compose, BlogCraft, Brand Voice | — | Yes | Yes | Yes |
| Edit a brand · add / remove / edit competitors | — | Yes | Yes | Yes |
| Manage brief deliveries — connect / remove channels | — | Yes | Yes | Yes |
| Create or delete a brand · change Settings | — | — | Yes | Yes |
| Manage the team — invite, remove, change roles, set brand access | — | — | Yes | Yes |
| Billing — plans, seats, cancelling | — | — | — | Yes |
Brand access is a separate layer on top of all of this: it decides which brands a person's role applies to. A teammate with no brand limit works across all of your brands; a scoped one is held to the brands you pick. See limiting someone to one brand.
Owner
The owner is whoever pays for the account. They have every permission there is, on every brand, and they're the only one who can change the plan, buy seats or cancel. The owner can't be removed and can't be handed to someone else from inside the app — if you need to move ownership (a hand-over, a company change), contact [email protected].
Admin
Admin is the role for someone you trust to run the account with you. Admins can do everything the owner can — invite and remove teammates, change roles, create and delete brands, edit settings, manage competitors and content — with one exception: billing. Only the owner sees the plan, seats and cancel controls.
You can't promote anyone to Owner. The highest role you can assign is Admin.
Editor
Editor is the everyday "does the work" role. An Editor can:
- Write and edit content in Compose and BlogCraft, and train Brand Voice.
- Edit a brand's details, and add, remove or edit its competitors.
- Connect and manage where briefs are delivered.
An Editor can't create or delete a whole brand, change account settings, manage the team, or touch billing. Because Editors generate content, remember they spend your credits — see what a teammate shares with you.
Viewer
Viewer is read-only, everywhere. A Viewer can open any brand, read every brief, see competitor activity and visibility scores, and read drafted content — but they can't change or create anything, and they can't spend a single credit. It's the right role for a client who wants visibility, or a stakeholder who just needs to keep an eye on things.
How permissions are enforced
Permissions aren't just cosmetic. Two things happen:
- The app hides what your role can't use — a Viewer never sees an edit button; an Editor never sees the billing page.
- The server refuses it anyway — even if someone tried to trigger an action directly, the server checks the role and rejects it. The screen and the server agree.
Brand access sits on top: a scoped teammate is blocked from another brand's data entirely, not just hidden from it.