Roles & Permissions
Role-based access control for organizations and projectsEdit
Choose a role based on the tasks a teammate needs. Use the tables below to check permissions.
Role Overview
Members can view all active projects in their organization. Project Admin and Project Editor gain additional permissions only in assigned projects; their access to other projects remains read-only. Organization administrators manage all projects in their organization.
| Role | Level | Description |
|---|---|---|
| Super Admin | System | Platform-wide control, user management, and impersonation |
| Org Owner | Organization | Full organization control including deletion |
| Org Admin | Organization | Organization management without deletion rights |
| Project Admin | Project | Full control of assigned projects |
| Project Editor | Project | Create and edit resources in assigned projects |
| Project Viewer | Organization | Read-only access to all projects |
Role Overview Diagram
Scroll horizontally to view the full diagram.
Use the matrix below for each role's exact permissions and project scope.
Permission Matrix
| Resource | Super Admin | Org Owner | Org Admin | Project Admin | Project Editor | Project Viewer |
|---|---|---|---|---|---|---|
| View organization | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Update organization | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| Delete organization | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
| Invite members | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| Manage members | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| Remove members | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Variables & Secrets
Variables and secrets have special permission rules to balance usability with security.
| Action | Super Admin | Org Owner | Org Admin | Project Admin* | Project Editor* | Project Viewer |
|---|---|---|---|---|---|---|
| View variables | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create variables | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |
| Edit variables | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |
| Delete variables | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
| View secret values | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |
Project Editors can create and edit variables and reveal secret values in assigned projects. They cannot delete variables. Keep revealed values out of chat, logs, and shared documents.
Super Admin and Access Scope
Quick Reference
| If you need to... | Minimum Role Required |
|---|---|
| View tests and runs | Project Viewer |
| Run tests manually | Project Editor |
| Create new tests | Project Editor |
| Delete tests | Project Admin |
| Invite team members | Org Admin |
| Delete the organization | Org Owner |
| Ban/unban users | Super Admin |