> ## Documentation Index
> Fetch the complete documentation index at: https://docs.instantcampaign.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Team, roles and permissions
> Invite teammates, choose what each person can do with the seven standard roles, and build custom roles when none fits.
Everyone in a workspace has one role. A role is a set of permissions, and roles give people *different* access, not just more or less of the same access. For example, a Content Creator can write a campaign but can't send it, and a Data Manager can export contacts but can't edit templates.
* **Settings → Team** is where you invite people and assign roles.
* **Settings → Roles** lists the standard roles and manages custom ones.
Both require the **Team** permission, which Owners and Administrators have.
## Invite a teammate
Go to **Settings → Team** and click **Invite Member**.
Enter their **Email Address** and pick a **Role**. The list includes the standard roles and any custom roles.
Click **Send Invite**. They receive an email with a link to accept. Invites expire after **7 days**.
Pending invites are listed under **Pending Invites** with their expiry. Use **Cancel Invite** to withdraw one.
The number of team members is limited by your plan. See [Billing and plans](/guides/sending-and-workspace/billing-and-plans).
## Change or remove a member
* **Change a role:** pick a new role in the member's row and confirm. The change takes effect straight away.
* **Remove a member:** use **Remove Member**. They lose access to the workspace.
* **Leave a workspace yourself:** use **Leave Team**.
Only the **Owner** can make someone an **Administrator**. The Owner can't be demoted or removed.
## The standard roles
| Role | In short |
| ------------------- | --------------------------------------------------------- |
| **Owner** | Full access, and owns the workspace. |
| **Administrator** | Full access to everything, including settings and people. |
| **Channel Manager** | Builds and sends campaigns and journeys. |
| **Content Editor** | Writes content and can send it. |
| **Content Creator** | Writes content, but can't send it. |
| **Data Manager** | Manages contacts, lists and segments. |
| **Viewer** | Can look at everything, change nothing. |
Permissions are grouped by area. *Read* means see, *write* means create and edit, and the third action (approve, send, activate, export or manage) is separate from write on purpose. Authoring something and putting it in front of your whole list are different acts, and so are writing a template and approving it.
| | Content | Contacts | Segments | Campaigns | Journeys | Analytics | Settings | Integrations | API keys | Team |
| ------------------------- | -------------------- | ------------------- | ----------- | ----------------- | --------------------- | --------- | ----------- | ------------ | -------- | ------ |
| **Owner / Administrator** | read, write, approve | read, write, export | read, write | read, write, send | read, write, activate | read | read, write | read, manage | manage | manage |
| **Channel Manager** | read | read | read, write | read, write, send | read, write, activate | read | read | – | – | – |
| **Content Editor** | read, write | read | read | read, write, send | read | read | – | – | – | – |
| **Content Creator** | read, write | read | read | read, write | read | read | – | – | – | – |
| **Data Manager** | read | read, write, export | read, write | read | read | read | – | – | – | – |
| **Viewer** | read | read | read | read | read | read | – | – | – | – |
**Content: approve** is template review: approving or rejecting templates in a team workspace, and having your own template edits count as approved. Only Owners and Administrators have it among the standard roles; a custom role can allow it. See [Approvals in team workspaces](/guides/email-and-templates/email-builder#approvals-in-team-workspaces).
Owner and Administrator have the same permissions. The differences: only the Owner can hand out the Administrator role or change the plan, and the Owner can't be demoted or removed.
A few areas still check for **Owner or Administrator** specifically, not an individual permission: adding sending domains, the deliverability checks and warm-up controls, attribution rules, reactivating bounced contacts, sender information, the brand kit, **General** settings, the custom link endpoint, tracking tokens, email sending providers, webhooks, analytics export, subject requests and the processing record. People on other roles, including custom roles with broad permissions, can't change these areas. They can't even open **Subject Requests** or the **Processing Record**.
## Custom roles
When none of the standard roles fits, build your own.
Go to **Settings → Roles** and click **New role** under **Custom roles**. Give it a **Name** and **Description**.
Each permission has three states. Click once to **allow** it, again to **deny** it, and again to leave it **unset**. Unset means not allowed.
Click **Save**, then assign the role to people from **Settings → Team**.
An explicit **deny always wins**. That matters when you later broaden a role: a permission you denied stays denied.
You can't delete a role while people hold it. Move them to another role first.
A role that includes the **Team** permission can invite people and edit roles, including its own. Treat it like an administrator role.
## Troubleshooting
Their role has **Campaigns: write** but not **send**. Content Creator is set up this way on purpose. Give them Content Editor or Channel Manager, or a custom role that allows send.
Approving is the **Content: approve** permission, which is separate from write. Only Owners and Administrators have it among the standard roles, so a Content Editor or Content Creator submits templates for review. To let someone review without making them an Administrator, give them a custom role that allows **Content: approve**.
Check spam, then cancel the invite and send a new one. Invites also expire after 7 days.
The Owner can't be removed from their workspace, and you can't delete your account while you're the only Owner of a workspace that has other members. Ownership can't be transferred in the app. To close the workspace, remove the other members under **Settings → Team**, then delete your account under **Settings → Danger Zone**, which deletes the workspace too. To keep the workspace running for your team, contact support.