Roles and data access

Three separate controls

A Team seat, organization role, and data permission answer different questions. Every Team member has the same paid Full seat, but their role and data access can differ.

• Full Team seat: the commercial access billed for each person.
• Organization role: whether someone is an owner, admin, or member and which settings they may manage.
• Data permission: which dataset, table, or view that person may use.

Organization roles

Owners can delete the organization. Owners and admins manage billing, members, and settings. Members cannot administer the organization.

Full Team access

Full is the only commercial Team seat. Owners, admins, and members cost the same per person. Full access does not let a member administer the organization, and it does not widen the data they can use.

Managing roles and permissions

Owners and admins can review and change organization roles on the Settings > Members (sign in to open this page) page. Manage data access separately through node grants. Viewer can read; Editor can change rows and ordinary tables and views but cannot change grants, publication, connections, or dataset structure. A human with effective Admin access can manage structure and grants for that subtree. A machine or delegated Admin cannot delegate grants. The same authorization rules apply whether you use the web app or the API.