Roles
A workspace has four roles: Viewer, Member, Admin and Owner. This page says what each may do, how people are invited, and how roles are changed.
The four roles
| Role | In one sentence |
|---|---|
| Viewer | Reads every screen and changes nothing. |
| Member | Also works on the content of a site: its prompts, competitors and names. |
| Admin | Also runs scans, which is what costs money, and manages sites, people and API keys. |
| Owner | Also tops up the balance, deletes sites, renames the workspace and decides who else is an Owner. |
- Each role includes everything the role before it may do.
- A role belongs to one workspace. The same person can be an Owner in one workspace and a Viewer in another.
- A role covers every site of the workspace, unless a Member or a Viewer is limited to some sites. See Access to sites.
- The person who creates a workspace is its Owner.
What each role may do
| Action | Viewer | Member | Admin | Owner |
|---|---|---|---|---|
| See the dashboard, prompts, answers, trends, competitors, pages and scan history | ✓ | ✓ | ✓ | ✓ |
| See the member list and the cost estimate of a scan | ✓ | ✓ | ✓ | ✓ |
| Add, edit, pause, import and delete prompts; manage categories | – | ✓ | ✓ | ✓ |
| Add, edit and remove competitors | – | ✓ | ✓ | ✓ |
| Open a site’s settings | – | ✓ | ✓ | ✓ |
| Change a site’s brand name, logo, colour, other names, language and location | – | ✓ | ✓ | ✓ |
| Change a site’s monthly cap | – | – | ✓ | ✓ |
| Choose which assistants and models each site’s scans may use (Site settings → Assistants and models) | – | – | ✓ | ✓ |
| Run and cancel scans | – | – | ✓ | ✓ |
| Change scan settings: prompts to scan, assistants, models, limit per scan | – | – | ✓ | ✓ |
| Switch the schedule on or off | – | – | ✓ | ✓ |
| Add sites | – | – | ✓ | ✓ |
| Delete a site, with its scans and answers | – | – | – | ✓ |
| Invite people, cancel invitations, change roles, remove members | – | – | ✓ | ✓ |
| Connect their own AI over MCP: create and revoke their own keys | ✓ | ✓ | ✓ | ✓ |
| See and revoke everyone’s keys | – | – | ✓ | ✓ |
| Download the monthly statements | – | – | ✓ | ✓ |
| Top up the balance and download invoices | – | – | – | ✓ |
| Give or take away the Owner role; remove an Owner | – | – | – | ✓ |
| Rename or delete the workspace | – | – | – | ✓ |
| Leave the workspace | ✓ | ✓ | ✓ | ✓ |
The server checks the role on every request. If you press a button your role does not allow, nothing changes and you see the message “You do not have permission to do that.”
Owners
- A workspace always has at least one Owner. The last Owner cannot be removed.
- Only an Owner can make someone else an Owner, change an Owner’s role, or remove an Owner. An Admin cannot.
- Nobody can change their own role, Owners included. Another Owner has to do it.
- The role lists in the app offer Viewer, Member and Admin.
Inviting people
Inviting needs the Admin or Owner role.
- Click the gear icon in the top bar and open Members & roles.
- Press Add member, enter the person’s email, choose a role and press Send invite.
- The person gets an email with a link. The link works for seven days.
What the invited person sees depends on whether they already have a Teddit account:
- No account yet. The link leads to sign-up with the invited email filled in. The account has to be created with that email; the invitation does not work for another address. They choose a name and a password and land in your workspace. No workspace of their own is created.
- An account with that email. They sign in and press accept. If they are signed in with a different email, Teddit asks them to switch to the invited one.
Rules worth knowing:
- Pending invitations count towards the workspace’s member limit, together with the people already in the workspace.
- Inviting an address again replaces the earlier invitation. The old link stops working.
- Someone who is already a member cannot be invited again.
- A pending invitation is listed with the members, marked “Invited”. Its menu has Cancel invitation.
Changing a role, removing a member
On Members & roles, open the menu at the end of a member’s row. Edit role and access changes the role; Remove from workspace removes the person. Both need the Admin or Owner role.
- A new role applies from the person’s next click. They do not need to sign in again.
- Removing a member removes their access only. The prompts they added and the scans they started stay.
- Anyone can leave a workspace on their own, under Account. The last Owner cannot leave: make someone else an Owner first, or delete the workspace.
The API keys of a removed member stop working at once.
Access to sites
A Member or a Viewer can be limited to some sites of the workspace: choose them under Sites when you invite the person, or later in Edit role and access on Members & roles. “All sites” includes sites added later. Admins and Owners always see every site.
- A site outside a person’s access does not exist for them: it is not in the site list, its pages answer “not here”, and its spending, weekly email and notifications are left out for them.
- Their MCP and API keys see exactly the same sites.
- Raising someone to Admin gives them every site; lowering them back to Member starts again from every site until you choose.
Roles of API keys
Everyone in the workspace can connect their own AI. A key carries a role chosen when it is created: Read is Viewer, Read + edit is Member, Read + scan is Admin. There are no Owner keys, and a key can never have a higher role than the person who created it: a Viewer’s AI can read, a Member’s can also edit prompts and competitors, and only an Admin’s or Owner’s can run scans. Deleting a site is for the Owner alone, so no key can do it.
A key follows its creator: if their role is lowered, the key is lowered with it, and if they leave the workspace, the key stops working. Details: Authentication.