Roles and access
What owners, admins, users and guests can do in the app, what a personal account leaves out, and how the app behaves when you lack a permission.
Your role is set per organization, so you can be an owner in one organization and a user in another. Switching organization can change what you see.
| Capability | Owner | Admin | User | Guest |
|---|---|---|---|---|
| Read the feed, Insights, records and sessions | Yes | Yes | Yes | No |
| Post to the feed, and mention a person or a team | Yes | Yes | Yes | No |
| Pin, edit or remove other people's posts | Yes | Yes | No | No |
| Answer an approval or an agent card | Yes | Yes | Yes | No |
| Switch agents on and off in Configure, and customize them | Yes | Yes | Yes | No |
| Read an agent's Canvas | Yes | Yes | No | No |
| Open Automations from the menu | Yes | Yes | Yes | No |
| Run an automation with Test it now | Yes | Yes | No | No |
| Create research reports | Yes | Yes | No | No |
| Rename the workspace or change its logo | Yes | Yes | No | No |
| Invite, promote, demote or remove members | Yes | Yes | No | No |
| Read chats and signals | Yes | Yes | Yes | Yes |
Anything else, including starting calls and chats, is checked against your role on the server when you use it. On top of your role, individual records are granted to you or to a team you belong to; see Who can see a record.
Automations are open to users
Users can open Automations on the phone even though the web sidebar hides it from them. An approver can be any member of the organization, and an approval that blocks an automation should be answerable by whoever was asked, from wherever they are.
How the app behaves
The app hides what your role cannot use rather than showing a button that fails. Guests get no post button on Home and no Automations row in the menu. The + on the reports list and Test it now on an automation only appear for owners and admins. On the Workspace screen, everyone else sees the name and logo read only, with "Only an owner or admin can change the workspace."
Guests
A guest can see the organization, read its chats and their signals, and edit their own profile. They cannot post, answer approvals, use automations or read records. It is the role for someone who needs visibility without the ability to add anything.
Personal accounts
Anyone can sign up in the app and get a personal account: an organization of one, with you as its owner. It cannot invite anyone, and the app leaves out the team surfaces.
| Left out | Where it would be |
|---|---|
| The feed and Insights | Home, which shows Inbox, alerts and Artifacts instead |
| Automations | The menu, and the Automations tab inside calls and chats |
| Reports and Manage Domains | The menu |
| API keys | The menu |
| Users & teams | Workspace in the menu |
In a personal account, Configure has two segments: agents, and the signals you track.
A personal account runs on a free 30-day trial, started from Start trial in the Home top bar. Its status is on the Usage screen; see Usage. Once the trial has ended, actions that need it stop with "Your free trial has ended." A personal account can also be deleted from the menu; see Deleting your account.
Changing a role
In a team organization, an owner or admin changes roles under Menu → Workspace → Users & teams. Tap a member to switch them between admin and user with Make admin or Make user, or to remove them. Invitations sent from the phone offer the User and Admin roles. The phone does not make anyone a guest or an owner, and it cannot change your own role or the owner's.