Team & roles · Graph Docs

Everyone who can sign in to your team is listed under Settings → Team. What each person can see and change depends on their role.

Inviting people

Choose Invite member, enter their email and pick a role. Graph emails them an invitation. Pending invitations count toward your plan's team member limit until they're accepted or cancelled.

You can change a member's role or remove them from the Team page. Only owners can make someone an Owner, and nobody can give a role with more permissions than their own.

Roles

A role is a set of permissions. Every team has three built-in roles, which can't be changed:

Role	Can do
Owner	Everything, including billing and ownership.
Admin	Everything except billing.
Member	Content, media and marketing. Works in staging and production, but can't push to production or manage settings.

With Custom roles in your plan, you can create your own under Settings → Roles: name the role and tick its permissions. Doing anything in an area includes seeing it, and you can only grant permissions your own role has. Deleting a custom role moves its members, and pending invitations with it, to Member.

Permissions

Area	Permissions
Content	View entries · Create and edit entries · Publish and unpublish entries · Delete entries · Manage content types
Media	View media · Upload, rename and organize media · Delete media
Marketing	View lists and campaigns · Manage lists and subscribers · Create and send campaigns
Environments	Push staging changes to production · Set up and reset staging
Settings	Invite and remove members, change roles · Create and edit roles · Manage API keys · Manage localization, integrations and domain · Manage workflows · Manage billing

API keys have permissions of their own; see Authentication & API keys.