Skip to main content

Understanding Workspace Roles and Permissions

Learn how workspace roles, rank, and seven permission controls determine who can manage sensitive settings and spend workspace resources.

Written by Anne Buzzi

Workspace roles let selected Archive workspaces control who can manage sensitive settings and spend workspace resources. Each workspace defines its own roles using a name, a seniority rank, and seven permission switches.

🔵 Workspace roles are available only in workspaces where this feature has been enabled. If you do not see Settings → Roles, contact your Customer Success Manager.


How Workspace Roles Work

A role has three parts:

  • Name: A label that is unique within the workspace.

  • Rank: The role's seniority. Lower numbers are more senior, and rank 0 is the most senior.

  • Permissions: Seven on-or-off controls for sensitive actions.

Rank determines who can manage whom. A member can manage only members whose roles are less senior than their own.


The Seven Role Permissions

  • Manage sources: Add, edit, and remove sources under Settings → Sources.

  • Purchase credits: Buy credit packs under Settings → Credits & Usage.

  • Change workspace time zone: Update the workspace time zone under Settings → User Settings.

  • Manage roles: Create, edit, delete, and assign workspace roles.

  • Use credits: Run features that spend workspace credits.

  • Manage API tokens: Generate, rotate, and disable the workspace API token under Settings → API.

  • Manage webhooks: Create, edit, and remove outbound webhook endpoints under Settings → Webhooks.

Workspace roles currently control these seven actions. Other product areas are not changed by these permission switches.


Starting Roles

Archive provides two starting role presets:

  • Admin: Can manage sources, purchase credits, change the workspace time zone, manage roles, and use credits. API token and webhook management are off by default.

  • Member: Can use credits. The other six permissions are off by default.

These presets are starting points. Workspaces can create roles with their own names, ranks, and permission combinations.


Creating and Assigning a Role

  1. Open Settings → Roles.

  2. Create a role and give it a unique name.

  3. Choose its rank. Use a lower number for a more senior role.

  4. Turn on only the permissions that role needs, then save it.

  5. Assign the role to each workspace member.

🔴 Assign every member a role. A member without a role receives unrestricted access to all seven permissions and is treated as rank 0.


Common Questions

  • Why can't I see the Roles page?

    The workspace roles feature has not been enabled for that workspace. Contact your Customer Success Manager.

  • What happens if a member has no role?

    They receive unrestricted access to all seven permissions and are treated as rank 0, the most senior rank.

  • Can members with the same rank manage each other?

    No. A member must have a more senior rank to manage another member.

  • What happens in a workspace where roles are not enabled?

    All members keep unrestricted access, matching Archive's standard behavior without workspace roles.

Did this answer your question?