---
title: "Roles reference"
description: "The four workspace roles and the boundary that actually separates them."
updated: "2026-08-18"
verifiedAgainst:
  - packages/shared/src/index.ts
  - firestore.rules
---

| Role | Content | Settings | Spending and billing |
| --- | --- | --- | --- |
| `owner` | Yes | Yes | Yes |
| `admin` | Yes | Yes | Yes |
| `editor` | Yes | Limited | No |
| `viewer` | Read only | No | No |

## The boundary that matters

Actions that cost money or change what the workspace is billed are restricted to
the owner and admin roles. That includes plan changes, adding Projects and
anything that spends allowance in a way a workspace has not agreed to.

## Scope

Roles are held at workspace level and apply to every Project in the workspace.
There is no per Project role today.

## Changing a role

In workspace settings, by an owner or admin. See
[roles and access](/workspaces/roles).