Roles and permissions

What each organisation role can do in the Org Panel, and how to give someone a narrower role than Admin.

Every member of an organisation has one role. The role decides which parts of the Org Panel they can open. Members see only the pages their role allows.

The roles#

RoleCan do
OwnerEverything, including billing and transferring ownership
AdminEverything except transferring ownership
Billing adminPlans, seats, invoices and payment method
User adminMembers, shared mailboxes, lists, aliases, domains and offboarding
Security adminSecurity policy, sessions, alerts, single sign-on, compliance and the audit log
AuditorRead-only access to the audit log, message trace and insights
MemberUses their own mailbox. No access to the Org Panel

Narrow roles never include mail access. No role lets an administrator read a member’s messages.

Change someone’s role#

  1. Open Org Panel > Team members.
  2. Choose the member, then pick a role.
  3. Confirm. The change is recorded in the audit log.

Only an Owner or Admin can give admin-level roles. You cannot change your own role, and an organisation always keeps at least one Owner.

Transfer ownership#

  1. Open Org Panel > Team members and choose Transfer ownership (Owner only).
  2. Pick an Admin and enter your password.
  3. The chosen Admin gets an email link and confirms while signed in. The request expires after 48 hours.

After confirmation you become an Admin. Both people are notified by email.

Suspend a member#

Suspending blocks sign-in and signs the member out everywhere. Their mail stays where it is. Reactivate them from the same menu. A suspension applies only to accounts that belong to your organisation.

Last updated 1 November 2026