Control access with roles and permissions
Userorbit uses a role-based access control system to manage what each team member can see and do within your workspace. Assigning the right roles ensures team members have the access they need while protecting sensitive settings.
Available roles
Userorbit provides three built-in roles, each with a progressively broader set of permissions:
Viewer
Viewers have read-only access to most workspace content. They can:
- View feedback items, announcements, and the roadmap.
- Read comments and activity history.
- Access analytics dashboards in read-only mode.
Viewers cannot create, edit, or delete any content. This role is ideal for stakeholders who need visibility into customer feedback without the ability to modify anything.
Member
Members can actively contribute to day-to-day product management. In addition to everything Viewers can do, Members can:
- Create and edit feedback items.
- Write and publish announcements.
- Comment on feedback items and announcements.
- Manage labels and categories on content.
- Update feedback statuses.
- Create and edit roadmap items.
Members cannot change workspace settings, manage team members, or access billing. This role is suitable for product managers, designers, and engineers who work with feedback and announcements daily.
Admin
Admins have full access to everything in the workspace. In addition to Member capabilities, Admins can:
- Invite and remove team members.
- Change team member roles.
- Modify workspace settings (name, URL, design, integrations).
- Manage billing and subscription.
- Configure the customer portal and widget.
- Create and manage API keys.
- Access all analytics and export data.
Reserve the Admin role for people who need to manage the workspace itself, not just its content.
Assigning and changing roles
- Navigate to Settings → Team.
- Find the team member in the Active list.
- Click the role badge next to their name.
- Select the new role from the dropdown.
- The change takes effect immediately. The team member sees their updated permissions on their next page load.
Role assignment for new invitations
When inviting new team members, you select their role during the invitation process. If you need to change the role before they accept, you can do so from the Pending invitations tab.
Owner role
The workspace Owner is a special designation on top of the Admin role. The Owner has all Admin permissions plus the ability to:
- Delete the workspace entirely.
- Transfer ownership to another Admin.
There is exactly one Owner per workspace. Ownership can be transferred but not shared.
Best practices
- Principle of least privilege — assign the minimum role needed for each person responsibilities.
- Limit Admin count — keep the number of Admins small to reduce the risk of accidental setting changes.
- Use Viewer for stakeholders — executives and cross-functional partners who only need to observe can use the Viewer role.
- Review roles quarterly — as team members change responsibilities, update their roles to match.