Roles and Permissions
User Roles
| Role | Description |
|---|---|
| Owner | Full access to all features. Can manage users, billing, and account settings. Only one owner per account. |
| Admin | Full access to all features except billing and plan management. Can manage users. |
| Manager | Can create and manage campaigns, contacts, and integrations. Cannot manage users or billing. |
| Viewer | Read-only access to dashboards, reports, and delivery events. Cannot create or modify resources. |
Permission Matrix
| Feature | Owner | Admin | Manager | Viewer |
|---|---|---|---|---|
| Account Profile | Edit | Edit | View | View |
| User Management | Full | Full | No Access | No Access |
| API Keys | Full | Full | View/Create Own | No Access |
| Plans | Full | View | View | View |
| Billing | Full | No Access | No Access | No Access |
| Usage Report | View | View | View | View |
| Transactions | View | View | No Access | No Access |
| Send Integrations | Full | Full | Full | View |
| Email Content | Full | Full | Full | View |
| Contact Lists | Full | Full | Full | View |
| Suppression Lists | Full | Full | Full | View |
| Segments | Full | Full | Full | View |
| Scheduled Email | Full | Full | Full | View |
| Triggered Sequences | Full | Full | Full | View |
| Forms | Full | Full | Full | View |
| Reports | View | View | View | View |
| Delivery Events | View | View | View | View |
| Contact History | View | View | View | View |
| Settings (Brands, Domains) | Full | Full | View | View |
| Platform Integrations | Full | Full | Full | View |
| Webhooks | Full | Full | Full | View |
API Key Permission Types
| API | None | Read Only | Full Access |
|---|---|---|---|
| Contact API | No access | Can query contacts and list metadata | Can add, update, and query contacts |
| Transactional Email API | No access | Can view transactional relay info | Can send transactional emails and manage relays |
| Suppression API | No access | Can download suppression lists | Can download, add, and delete suppression records |
Notes
- New users are created with the role assigned during creation; roles cannot be changed after creation without deleting and re-creating the user
- Deactivated users retain their role but cannot log in or perform any actions
- API keys inherit no role-based restrictions; permissions are set independently per key
- The Owner role is automatically assigned to the account creator