On this page, we will walk you through team roles and the permissions related to each role. There are four team roles:
- Owner
- Maintainer
- Editor
- Viewer
Team role permissions
The following table applies to accessible team content. You also need workspace Editor or higher to edit content or manage team members and filters.
In the member list, an Owner can assign any team role. A Maintainer can change a non-Owner’s role to Editor or Viewer and remove non-Owners. When adding members, a Maintainer can also invite Maintainers; only an Owner has the option to invite Owners. The backend membership endpoints use the Owner/Maintainer permission check and do not enforce all of these interface restrictions.
How team and workspace roles work together
A workspace Viewer cannot gain editing permissions from a higher team role. A workspace Admin, system Admin or System Admin has administrative access to teams, regardless of their team role. This does not give access to another user’s personal dashboards.
Creating dashboards requires workspace Editor or higher. Creating, updating or deleting teams requires workspace Manager or Admin in the backend; a team role alone does not grant that permission. Promoting a workspace Viewer to a higher team role also requires a workspace Admin to approve changing their workspace role.
See Workspace roles for the workspace permissions matrix. Last modified on October 22, 2026
