Roles and permissions
The roles at a glance#
- Owner — one per workspace. The only role that can spend money or delete the workspace.
- Admin — runs the workspace day to day. Reaches every board.
- Member — the ordinary working role, on the boards they've been added to.
- Viewer — read-only. Free, never counted against your seat limit.
- Commenter — a viewer who may also comment on tickets it can see.
- Guest (view only) — an outsider on named boards. Free.
- Guest (can edit) — the same reach, plus write access. Costs a seat.
What each role can do#
| Capability | Owner | Admin | Member | Viewer | Guest (view) | Guest (edit) |
|---|---|---|---|---|---|---|
| Read boards they're added to | Yes | Yes | Yes | Yes | Yes | Yes |
| Reach every board in the workspace | Yes | Yes | No | No | No | No |
| Read the wiki | Yes | Yes | Yes | Yes | No | No |
| Create and edit tickets on their boards | Yes | Yes | Yes | No | No | Yes |
| Open admin screens (People, Invitations, API keys, Audit log) | Yes | Yes | No | No | No | No |
| Start, change or cancel the subscription | Yes | No | No | No | No | No |
| Rename or delete the workspace | Yes | No | No | No | No | No |
| Counts as a billable seat | Yes | Yes | Yes | No | No | Yes |
Guests see the workspace as if it were only their boards#
A guest additionally cannot list the workspace's people beyond their own boards, read any wiki page, read Trash/labels/templates/billing, or reach admin screens. A guest cannot be promoted straight to admin or owner — make them a member first.
Viewers are read-only and free#
A viewer reads every board they're added to and every wiki page in the
workspace, and changes nothing. Never billed, never refused by a seat limit.
Blocked writes answer 403 {"error": "Your role in this workspace is read-only."}.
Ownership is not a dropdown#
Ownership moves through a deliberate transfer; the outgoing owner becomes an admin. See Members and offboarding for how to transfer.
Changing a role takes effect immediately — including for any API key that person already holds. See API keys.