User Roles
Typograph assigns roles at two levels:
- Organization role — your position in an organization (member, admin, owner). Controls who can manage members, apps, webhooks, and the subscription.
- Resource role — your role on a specific team, project, or template. Controls whether you can view, edit, or delete that particular resource.
This split lets you be an organization admin overall while still only editing specific projects, or vice versa — a guest with no organization role can still be given editor rights on a single template.
Organization Roles
| Role | What they can do |
|---|---|
| Owner | Full control: manage members, apps, webhooks, subscription, delete the organization |
| Admin | Manage members, apps, webhooks; cannot delete the organization or transfer ownership |
| Member | Use the organization's teams and projects they've been added to; no org-level administration |
Resource Roles (Team / Project / Template)
These apply to a specific resource and determine what you can do with that resource's contents.
| Role | View | Edit | Share / invite | Delete |
|---|---|---|---|---|
| Owner | ✓ | ✓ | ✓ | ✓ |
| Editor | ✓ | ✓ | ✓ | |
| Commenter | ✓ | |||
| Viewer | ✓ |
(Exact role catalog and capabilities are owned by the Identity Service, which is the source of truth. See Identity Service for the API-side model. Roles can be adjusted over time; the Portal always reflects the live configuration.)
Where Each Role Applies
- Organization roles are granted when you're invited into the organization (or it's created with you as owner).
- Resource roles are granted when someone invites you to a specific team, project, or template. You can have different roles on different resources.
Seeing Your Role
- Your organization role — visible in Organizations → {Your Org} → Members.
- Your resource role — visible in each resource's Share / Invite dialog, and in the resource card in the sidebar.
Related
- Permissions — the detailed permission model and resource-level sharing
- API → Identity Service — org and member management over the API