> ## Documentation Index
> Fetch the complete documentation index at: https://support.detrics.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspace Roles and Permissions

> Understand workspace roles, what each role can do, and how permissions work in Detrics

<Info>**Last updated:** December 5, 2025</Info>

Every workspace member is assigned a role that determines what they can access and manage. This guide explains the two workspace roles and their permissions.

## Workspace Roles Overview

<CardGroup cols={2}>
  <Card title="Owner" icon="crown" color="#f59e0b">
    Full access to billing, team management, and all workspace settings. Can manage all connections and team members.
  </Card>

  <Card title="Member" icon="user" color="#2563eb">
    **Default role.** Can connect data sources and use all reporting features in Google Sheets and Looker Studio.
  </Card>
</CardGroup>

<Note>
  When you invite someone to your workspace, they automatically become a **Member**. Only existing Owners can promote Members to Owner status.
</Note>

***

## Permissions by Category

### Team Management

| Permission         |    Owner    |   Member  |
| ------------------ | :---------: | :-------: |
| User management    | Full access | View only |
| License management | Full access | View only |

<Info>
  **User management** includes inviting new members, removing members, and changing member roles.
</Info>

### Billing

| Permission         |    Owner    |   Member  |
| ------------------ | :---------: | :-------: |
| Billing management | Full access | No access |

<Warning>
  Only Owners can access billing settings, update payment methods, change plans, and view invoices.
</Warning>

### Data Source Connections

| Permission                      |    Owner    |    Member   |
| ------------------------------- | :---------: | :---------: |
| Manage own connections          | Full access | Full access |
| View and use shared connections | Full access | Full access |
| Manage team connections         | Full access |  No access  |

<Info>
  **Manage team connections** means the ability to reconnect, replace, archive, or modify sharing settings on connections created by other team members.
</Info>

Both Owners and Members can:

* Connect new data sources
* Manage connections they created (reconnect, replace, archive)
* Use any shared connection in their queries
* Share their own connections with the team

Only Owners can:

* Manage connections created by other team members
* Override sharing restrictions on any connection

### Destinations

| Destination            |    Owner    |    Member   |
| ---------------------- | :---------: | :---------: |
| Looker Studio          | Full access | Full access |
| Google Sheets          | Full access | Full access |
| BigQuery (coming soon) | Full access | Full access |

<Note>
  Destinations like Looker Studio, Google Sheets, and BigQuery have no restrictions at the workspace level. Access must be managed within each destination itself (e.g., sharing settings in Google Sheets or Looker Studio).
</Note>

***

## Role Comparison

| Capability                      | Owner | Member |
| ------------------------------- | :---: | :----: |
| Create queries in Google Sheets |  Yes  |   Yes  |
| Build Looker Studio dashboards  |  Yes  |   Yes  |
| Connect new data sources        |  Yes  |   Yes  |
| Manage own connections          |  Yes  |   Yes  |
| Use shared connections          |  Yes  |   Yes  |
| Invite team members             |  Yes  |   No   |
| Remove team members             |  Yes  |   No   |
| Change member roles             |  Yes  |   No   |
| Access billing settings         |  Yes  |   No   |
| Manage team connections         |  Yes  |   No   |

***

## When to Use Each Role

### Assign Owner Role When:

* The person needs to manage billing and subscriptions
* They should be able to invite or remove team members
* They need to manage connections created by others (e.g., when the original creator is unavailable)
* They're responsible for overall workspace administration

### Keep as Member When:

* They only need to create reports and dashboards
* They'll manage their own data source connections
* They don't need access to billing or team management
* They're a regular team member or client with access to specific data

***

## Managing Roles

### Promoting a Member to Owner

<Steps>
  <Step title="Go to Team Settings">
    Navigate to your workspace settings and select the Team section.
  </Step>

  <Step title="Find the Member">
    Locate the team member you want to promote in the members list.
  </Step>

  <Step title="Change Role">
    Click on their current role and select "Owner" from the dropdown.
  </Step>

  <Step title="Confirm">
    The change takes effect immediately. The new Owner now has full workspace access.
  </Step>
</Steps>

### Demoting an Owner to Member

<Steps>
  <Step title="Go to Team Settings">
    Navigate to your workspace settings and select the Team section.
  </Step>

  <Step title="Find the Owner">
    Locate the Owner you want to change.
  </Step>

  <Step title="Change Role">
    Click on their current role and select "Member" from the dropdown.
  </Step>

  <Step title="Confirm">
    The user immediately loses access to billing and team management features.
  </Step>
</Steps>

<Warning>
  **Cannot remove last Owner:** Every workspace must have at least one Owner. You cannot demote the last remaining Owner.
</Warning>

***

## Workspace Roles vs Connection Roles

It's important to understand the difference between workspace roles and connection roles:

| Type                 | Roles         | Scope                                                   |
| -------------------- | ------------- | ------------------------------------------------------- |
| **Workspace roles**  | Owner, Member | Apply to the entire workspace (billing, team, settings) |
| **Connection roles** | Owner, Editor | Apply to individual data source connections             |

<Info>
  A workspace Member can still be a connection Owner for connections they create. These are separate permission systems.
</Info>

Learn more about connection-level permissions in [Connection Sharing and Permissions](/workspace/shared-private-connections).

***

## Frequently Asked Questions

<AccordionGroup>
  <Accordion title="Can a Member invite other users?">
    No. Only Owners can invite new team members to the workspace.
  </Accordion>

  <Accordion title="Can I have multiple Owners?">
    Yes. You can have as many Owners as needed. This is recommended for business continuity.
  </Accordion>

  <Accordion title="What happens when an Owner leaves?">
    If the Owner is removed from the workspace, their connections remain but need a new owner. Another Owner should take over management of those connections. Make sure you always have at least one other Owner before removing someone.
  </Accordion>

  <Accordion title="Can Members see billing information?">
    No. Billing information is only visible to Owners.
  </Accordion>

  <Accordion title="Do Members count toward my license?">
    Yes. Both Owners and Members count toward your workspace's licensed user count.
  </Accordion>
</AccordionGroup>

***

## Next Steps

<CardGroup cols={2}>
  <Card title="Connection Permissions" icon="link" href="/workspace/shared-private-connections">
    Learn how connection-level sharing and permissions work
  </Card>

  <Card title="Manage Connections" icon="gear" href="/workspace/view-manage-connections">
    View and manage all your data source connections
  </Card>
</CardGroup>

<Tip>
  **Need help?** If you have questions about roles or permissions, contact [support@detrics.io](mailto:support@detrics.io)
</Tip>