Roles and Permissions

Every login has exactly one organisation role. It applies to the whole account. Logins with the organisation role Member additionally get a project role for each project they work in. Admins and managers assign both kinds of role in the User Management.

Organisation roles

Role	Description
Admin (org)	Full rights: projects, user management, and invoices
Manager	Creates and manages projects, invites people; not a full admin
Billing manager	Views and downloads invoices, redeems codes; no resources, projects
Member	Access only through project roles; without a project, sees nothing

Admins and managers have the same rights with one exception: only admins can assign the role Admin (org) and change or deactivate other admins.

Project roles

Project roles only apply to logins with the organisation role Member, and only in the respective project. Admins and managers have full access to all projects anyway; billing managers have no access to projects.

Role	Products of the project	Allowed products of the project
Owner	View and change	View and change
User	View and change	View
Read	View	View

Overview

What	Admin	Manager	Billing manager	Member
Organisation	✔	✔	View only	✘
Create, rename, delete projects	✔	✔	✘	✘
Work in projects	All	All	✘	Per project role
Account & Security	✔	✔	✔	✔ (see below)
Payment Details	✔	✔	✔	✘
Invoices	✔	✔	✔	✘
User Management	✔	✔	✘	✘

✔ means access, ✘ means no access.

Members can't change the email address they sign in with in the web app.

If you open a page you have no permission for, the web app shows No access to this area. Buttons for actions you may not perform show a lock and the hint that your login only has read access here.