Workspace roles

Owner, admin, member, and viewer — what each role can do at the workspace level.

Workspace roles are about administering the workspace itself — managing members, billing, integrations, projects. (Roles inside individual apps are separate; see Roles & permissions.)

The default roles

Role	Manage members	Manage billing	Create projects	Edit projects	View projects
Owner	✓	✓	✓	✓	✓
Admin	✓	✗	✓	✓	✓
Member	✗	✗	✓	✓ (those they have access to)	✓
Viewer	✗	✗	✗	✗	✓ (read-only)

For full permission detail, see Permissions.

Changing a member’s role

Settings → Members → [member] → Change role.

Only owners and admins can change roles. Owners can demote themselves (becoming admins) but only if there’s another owner.

Custom roles (Enterprise)

On the Enterprise plan, define custom roles with granular permission selection:

Role: "Designer"
- View: all projects
- Edit: only design-system project
- Members: ✗
- Billing: ✗
- Integrations: read-only

Configure in Settings → Roles → Create custom role.

Tips

Default new members to “member.” Promote to admin only as needed. Limits the blast radius of compromised accounts.

Use viewer for read-only stakeholders. PMs, executives, support — let them browse without editing access.

Related

Permissions

Full permission matrix.

Workspaces

The container.

App-level roles

Roles inside the apps you build.