Roles and permissions

Everyone in a workspace is an owner, an admin or a member. Members do the day-to-day work on requests and clients; admins also run the team and settings; the owner also handles billing.

What each role can do

Everyone manages their own Profile and Notifications in Settings. File retention emails always go to the owner; admins can turn them off, and members don't get them.

Restricted requests

By default, everyone on the team can see every request. For sensitive documents, an owner or admin can restrict a request from its ⋯ menu, under Who can see this.

• Only owners, admins and the members they choose see a restricted request, its files, notes and activity. It doesn't appear for anyone else in lists, search, reports or notifications.
• Your workspace must require two-factor authentication first, in Settings → Workspace.
• Nobody opens a restricted request until they've turned on two-factor authentication.
• A restricted request can only be assigned to someone who can see it.

Change someone's role

On the Team page, owners and admins choose Admin or Member in the person's Role column. To remove someone, open their ⋯ menu and choose Remove from team. They lose access straight away, and you choose who takes over their open requests.

Good to know

• Each workspace has exactly one owner. The owner's role only changes when they transfer ownership.
• Nobody can change their own role or remove themselves.
• Admins can change other admins' roles.
• Members see Settings → Workspace but can't change it, and don't see Branding & portal or Billing.
• Roles belong to a workspace: you can be an admin in one and a member in another.