Roles and permissions

Four roles: Owner, Admin, Billing Manager, User. What each can do, and the thing roles deliberately do not control.

Every member has one role, set when they are invited and changeable at any time without re-inviting them.

OwnerAdminBilling ManagerUser
Screens, content, playlists, appsYesYesYesYes
Billing and subscriptionYesYesYesNo
Invite, remove, and change membersYesYesNoNo
Workspace settingsYesYesNoNo
Create another AdminYesNoNoNo
SAML single sign-onYesNoNoNo
Transfer ownershipYesNoNoNo

What roles do not control

Roles are not about which screens you can see. Every role sees every screen, playlist, and piece of content in the workspace. There is no per-screen or per-playlist permission.

What differs is who can change members, billing, and workspace settings. If the requirement is that some people must not see some screens, the answer is a separate workspace.

Owner

Exactly one per workspace, and it is whoever created it.

The Owner can do everything, and two things only the Owner can do: assign the Admin role, and configure SAML single sign-on.

Ownership should sit with someone permanently in the organization, not a contractor or a consultant. Recovering a workspace whose Owner has left and whose mailbox is closed is an identity verification process that takes days. See Support PIN and account recovery.

Admin

Everything the Owner can do except transferring ownership, configuring SAML, and creating other Admins.

An Admin managing members can only assign Billing Manager or User. Promoting somebody to Admin requires the Owner.

Right for IT managers and operations leads who need to run the whole deployment.

Billing Manager

A User, plus billing.

They can manage screens, content and playlists, and can also handle the subscription, licenses, and invoices. They cannot invite or remove members, or change workspace settings.

Right for finance or operations people who own the subscription alongside ordinary work in the workspace.

User

Screens, content, playlists, and apps. No billing, no member management, no workspace settings.

The default when inviting somebody, and the right answer for most people: a communications lead refreshing lobby displays, a supervisor updating an operations screen.

Changing a role

Roles change from the members list and take effect immediately. Nothing a person made is affected: content, playlists, and screens they created stay exactly as they are.

Three things you cannot do, whatever your role: change the Owner’s role directly, change somebody who holds the same role as you, or change your own.

Type to search the documentation