Team and roles
Workspace members, role presets, and a View/Edit permission matrix for every resource.
Access to workspace resources is managed through roles and permissions. Manage it in Settings → Team and Invitations. You can apply a preset or set every resource permission manually.
Role presets
| Role | In brief |
|---|---|
| Buyer | Sees and edits only their own resources (streams, PWAs, domains, etc.). Analytics and conversions are read-only |
| Team lead | Sees and edits all team resources. Manages billing and has read access to the team |
| Admin | Full access to resources, billing, team, and workspace |
| Owner | Assigned automatically to the workspace owner; has full access and is not offered in the role list |
| Custom | Any manual deviation from a preset through “Configure permissions” |
Permission matrix (View / Edit)
Nine resources have independent view and edit scopes:
Streams, PWAs, Direct Links, Domains, Landings, Push, Integrations, Pixels, Offers.
| Scope | Meaning |
|---|---|
| None | No access |
| Own only | Only resources created by the person |
| All | All workspace resources |
Edit cannot be broader than View. Narrowing View automatically narrows Edit, and vice versa. Integrations (shared Cloudflare tokens) support only None / All: there is no per-user ownership.
Flat permissions
Resources without an own/all split:
| Resource | Levels |
|---|---|
| Billing | None / View / Manage |
| Team | None / View / Manage |
| Analytics | None / View |
| Workspace | None / Manage |
| Conversions | None / View / Manage |
Tracker logs: Analytics → View. Replay events: Pixels → Edit. If the permissions are set but the page is locked, message support.
Invitations
An invitation is a reusable link with predefined permissions. Fields: role/permission matrix, maximum uses, expiry date, and tags. You can set tags on both an invitation and a member.
You cannot grant permissions broader than your own. When creating an invitation or changing a member's permissions, the system limits them to a subset of yours. The workspace owner is the exception.