Roles and permissions overview

Learn about managing team members’ access to sensitive controls with roles and permissions.

Good to know

This overview covers the default roles and permissions. Enterprise customers and partners can also create custom roles to set which permissions they want team members to have.

Your Workspace has two types of roles for team members:

Workspace role — defines Workspace-level permissions and which site roles they can be assigned
Site role — defines site-level permissions and available actions

Workspace owners and admins can access the Workspace’s Team settings to manage seats and members. As you add members to your Workspace, you can control who can access sensitive controls (e.g., billing details) or take important actions (e.g., publishing a website) by assigning roles.

How the seat type determines the available roles

When you invite a new member to your Workspace, you select which type of seat they fill and whether they can publish. The seat type determines which Workspace role and Site role they can be assigned.

Role type	Workspace role	Site role
Full seat	Owner, Admin, Site manager, Designer	Site manager, Designer
Limited seat	Marketer, Content editor	Marketer, Content editor
Free seat	Reviewer	Reviewer
Freelancer or Agency Guest	Guest	Site manager, Designer

Compare Workspace roles and permissions

Each Workspace role includes a set of Workspace permissions and default site permissions. While some roles share the same Workspace permissions, their site permissions can differ significantly.

Workspace roles overview

Owner — manage all Workspace and site settings + design with all features
Admin — manage most Workspace settings and all site settings + design with all features
Site manager — manage all site settings + design with all features
Designer — design with all features
Marketer — create and edit pages using components
Content editor — only edits content
Reviewer — view and comment on sites
Guest — Agencies and Freelancers can be invited to design a client's site

Workspace permissions

Scroll right to see each role's Workspace permissions:

Permissions	Owner	Admin	Site manager, Designer, Marketer, Content editor	Guest	Reviewer
Edit Workspace plan and settings	✅	✅	❌	❌	❌
Add, update, or remove the payment card on file	✅	✅	❌	❌	❌
Update invoicing settings	✅	✅	❌	❌	❌
Download invoices	✅	✅	✅	❌	❌
Access all sites in a Workspace	✅	✅	❌ (can access the sites to which they’ve been	❌ (can access the sites to which they’ve been	❌ (can access the sites to which they’ve been
Invite and remove members from the Workspace	✅	✅	❌	❌	❌
Manage member permissions	✅	✅	❌	❌	❌
Configure integrations	✅	✅	✅	✅	❌
Update Workspace templates	✅	✅	✅	✅	❌
Request transfer of Workspace ownership to an admin	✅	❌	❌	❌	❌
Delete the Workspace	✅	❌	❌	❌	❌
Transfer hosting between sites in a Workspace	✅	✅	❌	❌	❌
Install and uninstall Apps	✅	✅	✅	✅	❌
Manage in-development Apps (e.g., create new Apps, edit App metadata, etc.)	✅	❌	❌	❌	❌
Install and uninstall Optimize and Analyze	✅	✅	❌	❌	❌

Default site role assignments

When a teammate is assigned a Workspace role, they’re automatically assigned a default site role:

Workspace role	Default site role	Site role description
Owner	Site manager	Manage all site settings Design with all designer features
Admin	Site manager
Site manager	Site manager
Guest	Site manager
Designer	Designer	Design with all designer features
Marketer	Marketer	Create and edit pages using components
Content editor	Content editor	Edit content
Reviewer	Reviewer	View and comment on sites

How to change site role assignments and publishing permissions

Growth, Agency, and Enterprise Workspace plans allow Workspace admins and site managers to modify site role assignments from an individual site’s Settings > Site access > Site role.

Growth and Agency plans can toggle the Can publish setting to On or Off to set publishing permissions.

Note

It’s not possible to change publish permissions for the site manager or reviewer roles. Members restricted from publishing can still publish individual CMS items that don’t impact in-progress designs.

Compare site roles and permissions

Scroll right to see each role's site permissions and scroll down to see the full permissions list:

Permissions	Site manager	Designer	Limited designer*	Designer (needs approval)*	Marketer	Content editor	Reviewer
Transfer the site out of the Workspace	✅	❌	❌	❌	❌	❌	❌
Archive the site	✅	❌	❌	❌	❌	❌	❌
Purchase and manage a Site plan and billing information	✅	❌	❌	❌	❌	❌	❌
Access design mode	✅	✅	✅	✅ (on page branches)	❌	❌	❌
Access build mode	✅	✅	✅	✅	✅	❌	❌
Access edit mode	❌	❌	❌	❌	❌	✅	❌
Create a read-only link to share the site	✅	❌	❌	❌	❌	❌	❌
Create and edit pages using components	✅	✅	✅	✅	✅	❌	❌
Create new classes	✅	✅	✅	✅ (on branches)	❌	❌	❌
Create new components	✅	✅	❌	❌	❌	❌	❌
Modify existing classes, components, and variables	✅	✅	❌	✅ (on branches)	❌	❌	❌
Add existing components to page slots	✅	✅	✅	✅ (on branches)	✅	❌	❌
Edit component property values	✅	✅	✅	✅ (on branches)	✅	✅	❌
Create and delete Collections	✅	✅	✅	❌	❌	❌	❌
Create, update, delete, and publish Collection items	✅	✅	✅	❌	✅	✅	❌
Modify page settings (i.e., set page password protection, edit SEO title and meta description, etc.)	✅	✅	✅	✅ (on branches) ❌ page passwords	✅	✅	❌
Create page branches	✅	✅	✅	✅	✅	✅	❌
Merge page branches	✅	✅	✅	✅ (with approval)	❌	❌	❌
Edit page branches	✅	✅	✅	✅	✅ (in build mode)	✅ (in edit mode)	❌
Publish changes to the live site	✅ (can manage the site's DNS and 301 redirects)	✅ (only when you toggle Can publish on)	❌ (can publish single items in CMS Collections, but can’t publish the entire site)	❌	✅ (only when you toggle Can publish on)	✅ (only when you toggle Can publish on)	❌
View the Site Activity log	✅	✅	✅	✅	✅	✅	❌
Export site as code	✅	✅	✅	✅	❌	❌	❌
View and download form submissions in Site settings	✅	✅	✅	✅	✅	✅	❌
Create an API token for the site	✅	❌	❌	❌	❌	❌	❌
Share, install, and manage Libraries	✅	✅	❌	❌	❌	❌	❌
Use components and variables from shared Libraries	✅	✅	✅	✅ (on branches)	✅ (if already used on the site)	❌	❌
Install and uninstall Apps	✅	✅	❌	❌	❌	❌	❌
Request reviews	✅	✅	✅	✅	✅	✅	❌
Approve reviews	✅	✅	❌	❌	❌	❌	✅
Create, view, and resolve comments	✅	✅	✅	✅	✅	✅	✅
Preview sites	✅	✅	✅	✅	✅	✅	✅
Modify Optimize and Analyze tracking settings	✅	❌	❌	❌	❌	❌	❌
Create and modify Optimize experiences	✅	✅	✅	❌	✅	❌	❌
Create and modify Optimize events, audiences, and goals	✅	✅	✅	❌	✅	✅	❌
Create and modify Optimize variations	✅	✅	✅	❌	✅	✅	❌
Enable and disable Optimize variations/experiences	✅	✅	✅	❌	✅	✅	✅
View results of an active or past Optimize experience	✅	✅	✅	❌	✅	✅	✅
View analytics report data	✅	✅	✅	❌	✅	✅	✅

*Enterprise-specific roles. If you’re an Enterprise customer or partner and previously used these roles, they have been automatically converted to custom roles You can further customize them based on your team’s needs.

Site role limitations and notes

There are a few limitations and notes related to the above permissions for legacy Editor users, reviewers, and limited designers.

Legacy Editor users (formerly known as content editors)

Some of the above functionality may not be available for legacy Editor users working in the legacy Editor (rather than in edit mode). Legacy Editor users won’t be able to access site backups.

Reviewers

Members with the reviewer role are restricted to existing comment limitations. That is, they won’t be able to comment on components, Collection items in the CMS panel, or elements that are only visible through custom code or animations.

Limited designers