User Roles

Everyone in your organization holds one role. It decides what they can create, separately from who can open any particular Deployable.

Role	Open what’s shared with them	Create Deployables	Create and own groups	Manage people, roles, billing
Guest	✓
Member	✓	✓
Creator	✓	✓	✓
Admin	✓	✓	✓	✓

Guest is someone from outside the organization who has been given one thing inside it. They see what has been shared with them and nothing else: no catalog, no member list, and no groups beyond the ones they were added to. Removing a guest from the organization takes every share with them, which is the point of attaching them to it.

Member is the ordinary role. Members create and share Deployables and own what they make. What they can’t do is create a group, which is the container other people’s work goes in.

Creator adds exactly that: creating and owning groups.

Admin manages the organization itself, its people, their roles, and billing, plus everything a creator can do.

Joining and leaving

An admin invites someone by email, and they arrive in the role the invitation set. Changing a role doesn’t disturb access already granted directly or through a group. Removing someone ends their access at once.

A person’s role and their group memberships are separate things. Owning three groups doesn’t make someone an admin.