| Role | Typical use |
|---|---|
| Owner | Full control, including billing and deleting the workspace |
| Admin | Manage members, integrations, and settings |
| Editor | Create, edit, and publish content and projects |
| Viewer | Read-only access |
Permissions are checked on every request for the signed-in user, so changes apply immediately to the web app, MCP clients, and automations. Plan entitlements can further restrict a capability even when the role allows the action.