Team & roles
Invite teammates, choose roles, and understand what each role can do.
Every workspace has members. Members can be assigned one of five roles, each a superset of the one below it. Roles are enforced both server-side (via server actions) and at the database layer (via Row-Level Security policies).
Inviting a teammate
Go to Settings → Team → Invite a teammate. Enter their email and role. An invitation email is sent with a signed one-time link valid for 7 days. The invite row stays in the pending list until they click through and complete signup.
Role capabilities
| Capability | Viewer | Analyst | Finance | Admin | Owner |
|---|---|---|---|---|---|
| View stats & reports | ✓ | ✓ | ✓ | ✓ | ✓ |
| Export CSV | — | ✓ | ✓ | ✓ | ✓ |
| Manage integrations | — | — | — | ✓ | ✓ |
| Manage campaigns / sources / deals | — | ✓ | — | ✓ | ✓ |
| View invoices & payouts | — | — | ✓ | ✓ | ✓ |
| Issue invoices & trigger payouts | — | — | ✓ | ✓ | ✓ |
| Invite & manage team | — | — | — | ✓ | ✓ |
| Manage billing | — | — | — | — | ✓ |
| Delete workspace | — | — | — | — | ✓ |
Changing roles
Open Settings → Team and click Manage next to a member. Changing a role takes effect immediately. There must always be at least one Owner per workspace — you can't demote yourself if you're the only one.
Removing members
Removing a member revokes their active sessions and their API keys. Their audit-log entries are preserved for compliance.