Roles and permissions
Every member of an organization has one of three roles: Owner, Admin, or Member. Roles are per organization — the same user can be an Owner in one org and a Member in another.
At a glance
| Role | Use it for |
|---|---|
| Owner | Full control, including deleting the organization and managing other owners |
| Admin | Day-to-day management of projects, members, and billing |
| Member | Can deploy and work with projects, but cannot change configuration or billing |
Permission matrix
| Action | Owner | Admin | Member |
|---|---|---|---|
| Organization | |||
| View organization | Yes | Yes | Yes |
| Rename organization | Yes | Yes | — |
| Delete organization | Yes | — | — |
| Members | |||
| View members | Yes | Yes | Yes |
| Invite members | Yes | Yes | — |
| Cancel invitations | Yes | Yes | — |
| Change member roles | Yes | Yes¹ | — |
| Remove members | Yes | Yes¹ | — |
| Leave organization | Yes² | Yes | Yes |
| Projects | |||
| Create projects | Yes | Yes | Yes |
| Rename / change source | Yes | Yes | — |
| Delete projects | Yes | Yes | — |
| Deployments | |||
| Trigger deployments | Yes | Yes | Yes |
| Rollback | Yes | Yes | Yes |
| Delete deployments | Yes | Yes | — |
| Environments | |||
| Create environments | Yes | Yes | — |
| Edit environment variables | Yes | Yes | — |
| Stop / start environments | Yes | Yes | Yes |
| Delete environments | Yes | Yes | — |
| Add / manage domains | Yes | Yes | — |
| GitHub integration | |||
| Install / remove GitHub App | Yes | Yes | Yes |
| Billing | |||
| View billing state and invoices | Yes | Yes | Yes |
| Edit billing details | Yes | Yes | — |
| Update payment method | Yes | Yes | — |
| Manage VAT number | Yes | Yes | — |
¹ Admins cannot change the role of or remove an Owner.
² An Owner can leave only if at least one other Owner remains.
Role notes
What each role can and can't do, in detail.
Owner
- Only role that can delete the organization
- Can promote any member to Owner, Admin, or Member
- Multiple Owners are allowed — recommended for teams to avoid a single point of failure
Admin
Full access to project operations and billing management. Cannot:
- Delete the organization
- Change the role of or remove an Owner
Member
Members can actively work with projects — they can deploy, roll back, stop and start environments, and create new projects. They cannot change any configuration: no renaming, no source changes, no environment variable edits, no billing changes, no inviting others.
Changing a member's role
Go to Organization → Members, find the member, and change their role from the dropdown. Owners can change any role. Admins can change roles of other Admins and Members, but not Owners.
See Members for the full member management flow.