Basic Roles of Organization#
Org Owner: Organization creator with highest permissions. Can rename, transfer, and dismiss the organization. Each organization has only one Owner.
Org Admin: Can manage members, teams, SSO settings, custom project roles, and organization resources. Cannot transfer or dismiss the organization.
Org Member: Basic member who can join the organization's teams and participate in project collaboration. Cannot access organization management features.
Default Roles and Permissions#
Organization Settings#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access organization settings page | โ
| โ
| โ | โ |
| Rename organization | โ
| โ
| โ | โ |
| Transfer organization ownership | โ
| โ | โ | โ |
| Dismiss organization | โ
| โ | โ | โ |
| Migrate data export | โ
| โ
| โ | โ |
Team Management#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access team management page | โ
| โ
| โ | โ |
| Create new team | โ
| โ
| โ | โ |
| Transfer team into organization | โ
| โ
| โ | โ |
| Transfer team out of organization | โ
| โ
| โ | โ |
Member Management#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access member management page | โ
| โ
| โ | โ |
| View member list | โ
| โ
| โ | โ |
| Invite members | โ
| โ
| โ | โ |
| Change member organization role | โ
| โ
| โ | โ |
| Remove members | โ
| โ
| โ | โ |
| View pending invitations | โ
| โ
| โ | โ |
| Resend invitation | โ
| โ
| โ | โ |
| Revoke invitation | โ
| โ
| โ | โ |
SSO/SAML#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access SAML SSO settings | โ
| โ
| โ | โ |
| Configure SAML SSO | โ
| โ
| โ | โ |
| Access Groups mapping | โ
| โ
| โ | โ |
| Configure Group Mapping | โ
| โ
| โ | โ |
Organization Resources#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Self-hosted Runners | โ
| โ
| โ | โ |
| Scripts | โ
| โ
| โ | โ |
| Database Connections | โ
| โ
| โ | โ |
| External Programs | โ
| โ
| โ | โ |
Custom Project Roles#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access Roles & Permissions page | โ
| โ
| โ | โ |
| Create custom project role | โ
| โ
| โ | โ |
| Edit custom project role | โ
| โ
| โ | โ |
| Delete custom project role | โ
| โ
| โ | โ |
Custom roles only support Project level. Organization roles do not currently support customization.
Subscription/Billing#
| Feature | Owner | Admin | Member | BillingManager |
|---|
| Access Plans page | โ
| โ
| โ | โ
|
| View usage | โ
| โ
| โ | โ
|
| Manage subscription | โ
| โ
| โ | โ
|
| Upgrade/Renew | โ
| โ
| โ | โ
|
| Invite/Remove Billing Manager | โ
| โ
| โ | โ
|
Billing Manager Role Specifics#
Billing Manager is an independent role, different from Org Owner/Admin/Member:1.
Cannot be assigned via member details page
2.
Invited via Billing Managers section on Plans page โ Independent invitation flow
3.
Limited permission scope โ Can only manage subscriptions and billing, cannot access other organization settings
4.
Can stack with other roles โ A user can be both Member and Billing Manager simultaneously
โ
Manage subscription/billing
โ
Invite/remove other Billing Managers
โ Access organization settings
โ Access organization resources
Billing Manager: Independent role that can only manage organization subscriptions and billing.
For instructions on setting a billing manager in an organization, see Billing managers in organization. Member Role Capabilities#
The Member role has very limited permissions at the organization level:1.
Cannot access organization management pages
2.
Can see Plans page โ But only read-only view of subscription status
3.
Can join organization's teams โ Team admins can add them to teams
4.
Can participate in project collaboration โ Based on project-level permissions
Key Point: The Member role is primarily a "passive recipient" role. They cannot actively manage the organization but can be invited to teams and participate in work.