Basic Roles of Organization#
Org Owner: Organization creator with highest permissions. Can rename, transfer, and dismiss the organization. Each organization has only one Owner.
Org Admin: Can manage members, teams, SSO settings, custom project roles, and organization resources. Cannot transfer or dismiss the organization.
Org Member: Basic member who can join the organization's teams and participate in project collaboration. Cannot access organization management features.
Default Roles and Permissions#
Organization Settings#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access organization settings page | β
| β
| β | β |
| Rename organization | β
| β
| β | β |
| Transfer organization ownership | β
| β | β | β |
| Dismiss organization | β
| β | β | β |
| Migrate data export | β
| β
| β | β |
Team Management#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access team management page | β
| β
| β | β |
| Create new team | β
| β
| β | β |
| Transfer team into organization | β
| β
| β | β |
| Transfer team out of organization | β
| β
| β | β |
Member Management#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access member management page | β
| β
| β | β |
| View member list | β
| β
| β | β |
| Invite members | β
| β
| β | β |
| Change member organization role | β
| β
| β | β |
| Remove members | β
| β
| β | β |
| View pending invitations | β
| β
| β | β |
| Resend invitation | β
| β
| β | β |
| Revoke invitation | β
| β
| β | β |
SSO/SAML#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access SAML SSO settings | β
| β
| β | β |
| Configure SAML SSO | β
| β
| β | β |
| Access Groups mapping | β
| β
| β | β |
| Configure Group Mapping | β
| β
| β | β |
Organization Resources#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Self-hosted Runners | β
| β
| β | β |
| Scripts | β
| β
| β | β |
| Database Connections | β
| β
| β | β |
| External Programs | β
| β
| β | β |
Custom Project Roles#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access Roles & Permissions page | β
| β
| β | β |
| Create custom project role | β
| β
| β | β |
| Edit custom project role | β
| β
| β | β |
| Delete custom project role | β
| β
| β | β |
Custom roles only support Project level. Organization roles do not currently support customization.
Subscription/Billing#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access Plans page | β
| β
| β | β
|
| View usage | β
| β
| β | β
|
| Manage subscription | β
| β
| β | β
|
| Upgrade/Renew | β
| β
| β | β
|
| Invite/Remove Billing Manager | β
| β
| β | β
|
Billing Manager Role Specifics#
Billing Manager is an independent role, different from Org Owner/Admin/Member:1.
Cannot be assigned via member details page
2.
Invited via Billing Managers section on Plans page β Independent invitation flow
3.
Limited permission scope β Can only manage subscriptions and billing, cannot access other organization settings
4.
Can stack with other roles β A user can be both Member and Billing Manager simultaneously
β
Manage subscription/billing
β
Invite/remove other Billing Managers
β Access organization settings
β Access organization resources
Billing Manager: Independent role that can only manage organization subscriptions and billing.
For instructions on setting a billing manager in an organization, see Billing managers in organization. Member Role Capabilities#
The Member role has very limited permissions at the organization level:1.
Cannot access organization management pages
2.
Can see Plans page β But only read-only view of subscription status
3.
Can join organization's teams β Team admins can add them to teams
4.
Can participate in project collaboration β Based on project-level permissions
Key Point: The Member role is primarily a "passive recipient" role. They cannot actively manage the organization but can be invited to teams and participate in work.