Gumshoe has two levels where you can add team members: your company account and your workspaces. Each level has its own set of roles that determine what someone can see and do. This article explains each role and what they have access to.
What are the company account roles?
The company account is the top-level account and billing entity. It contains one or more workspaces. There are two roles at this level:
- Admins: Company account admins can manage billing, workspaces, and team membership at both the company account and workspace levels, and view the Billing tab (which shows aggregated billing history across all workspaces). They have admin-level access to every workspace under the account.
- Members: Company account members automatically have member-level access to every workspace under the account, including any new workspaces created later. They cannot view the Billing tab, manage account settings, or invite additional users to join the account.
What are the workspace roles?
Workspaces are where your projects live and where you collaborate with teammates, departments, or clients. A project holds a Visibility Audit (formerly known as a report) and its associated audits. There are three roles at this level:
- Admins: Workspace admins can create and edit projects, move projects in and out of the workspace, invite new teammates, assign workspace roles, and view the Usage tab for that workspace.
- Members: Workspace members can create and edit projects within the workspace and view the Usage tab, but cannot invite new members or move projects out of the workspace.
- Viewers: Workspace viewers can view projects but cannot create, edit, move, or invite. Viewers also cannot see the Usage tab or any billing details.
How do company account roles and workspace roles interact?
A user's effective permissions in a workspace are always determined by their highest role across both the company account and the workspace. For example, a company account admin is automatically an admin in every workspace, even if they are listed only as a viewer in a specific workspace. A company account member has at least member-level access to every workspace, which means they can view the Usage tab of any workspace under the account (but they cannot see the aggregated Billing tab at the company account level).
Who can see Usage and Billing?
- The Usage tab (inside a workspace) is visible to workspace members, workspace admins, and anyone with a company account role.
- The Billing tab (at the company account level) is visible only to company account admins.
To invite teammates to a workspace or account, see How do I add team members to my company account or workspace?