Roles & permissions
Decide what each member can see and do — from built-in roles to custom permission sets.
Roles are how you keep the sensitive things — billing, managing people, deleting shared content — in the right hands, while everyone else gets on with their work. Setting them thoughtfully is the difference between a workspace that's open and one that's safe.
By the end you'll understand the built-in roles and how to apply least-privilege access across your team.
This is for owners (and admins, depending on your setup), under Settings → Organization → Roles.
Start from the built-in roles
Every workspace begins with sensible defaults — typically Owner, Admin and Member. Owners have full control; admins manage people and settings; members do the day-to-day legal work. For most teams, these three are all you'll ever need.
Give the least privilege that works
The rule of thumb is simple: give each person the lowest role that still lets them do their job, and reserve elevated permissions for the few who genuinely need them. Where the defaults don't fit, you can define a custom role with exactly the permissions you want and assign it to members.
Permission changes take effect immediately — double-check before removing access that someone relies on.