Users and roles
The four roles, what each can do, and how to change someone's role.
The Users page shows a count per role and a table of everyone with User, Email, Role, and Last Active.
| Role | Can |
|---|---|
| Owner | Everything. The person who created the organization |
| Admin | Everything: see all data, make decisions, change extensions, create tokens, change roles |
| Viewer | See every page, including sessions and the audit log. Change nothing |
| Member | See only their own laptop and the Downloads page |
Laptops enrolled through MDM get the role of the person they are assigned to, or Member if no person is set. That decides what the laptop’s own desktop app can show.
Before you begin
- You have the Owner or Admin role. Other roles see the list but cannot change it.
Change a role
Find the person
On the Users page, find their row.
Click the role badge
Choose Admin, Member, or Viewer.
The change is immediate and written to the audit log. You cannot change your own role. The Owner role cannot be given from the console.
Keeping the list in sync
Connect Google Workspace or Entra ID or Okta and the Users page follows your directory.
Next steps
- Connect Google Workspace or Entra ID or Okta to sync users automatically
- Audit log to see every role change