Create and inspect workspace roles

Purpose

Sara wants Neda to see the team's activity without being able to touch billing. See what Owner, Admin and Member can do, and create custom roles that add extra permissions to people or groups.

Before you start

• Select a team or organization workspace.
• You also need permission to view members to open Workspace administration.
• You need permission to view roles to open the tab, and permission to manage roles to create or edit custom roles. Owners and Admins have both.
• The workspace plan must include custom roles. The workspace can hold up to 200 custom roles.
• You can only tick permissions you hold yourself, so a role can never give more than its author has.

Steps

1. Open Settings, choose "Workspace administration" under "Workspace" and select the "Roles" tab. The note at the top says every Seat has an Owner, Admin or Member baseline role, and that direct and group roles add permissions.
2. Read the list. Owner, Admin and Member come first, each described as "Workspace baseline role" with a permission count. Your custom roles follow in alphabetical order. Built-in roles have a "View" button, custom roles an "Edit" button (a "View" button if you cannot manage roles).
3. Choose "View" on a built-in role to read its permissions. Its fields are locked and "Save" is disabled. Owner has all permissions, Admin has all except "Manage billing", and Member has "Use agents", "Manage agents", "Use plugins", "Use models", "View projects", "Manage projects" and "Use conversations".
4. To make a custom role, choose "Create role". Enter a "Name" (required, 1 to 120 characters after surrounding spaces are removed) and optionally a "Description" (up to 1000 characters).
5. Under "Permissions" tick what the role should add. The choices are: "Manage workspace", "View members", "Manage members", "View groups", "Manage groups", "View roles", "Manage roles", "View billing", "Manage billing", "Use agents", "Manage agents", "Use plugins", "Manage plugins", "Use models", "Manage models", "Manage workspace settings", "View projects", "Manage projects", "Use conversations" and "View workspace analytics".
6. Choose "Save". To change a role later, choose "Edit", adjust it and save again.
7. Give the role to a person (Members tab, "Assigned roles") or to a group (Groups tab, "Assigned roles").

Expected result

The role appears in the list with its permission count. People who hold it, directly or through a group, get its permissions on top of their baseline role. A role never removes baseline permissions. If you have no custom roles yet, the three built-in roles stay visible in the list.

Troubleshooting