Team & Enterprise plansRoles and permissions

Roles and what each can do

Every member of an organization has one role. The role decides what they can change in that organization; it has no effect on their other organizations. Syntic has five roles: Primary Owner, Owner, Administrator, Developer and Custom.

The roles

RoleIn short
Primary OwnerOne per organization. An owner with the final say, shown with a badge instead of a role menu. The only person who can accept legal agreements such as a business associate agreement and turn on HIPAA mode
OwnerFull control of the organization, including billing and ownership changes
AdministratorManages members, settings and content
DeveloperCreates and edits agents and content
CustomGets permissions from the groups and custom roles the member belongs to

Who can do what

ActionOwner / Primary OwnerAdministratorDeveloper
Use chat and create content in the organizationYesYesYes
See the plan, usage and billing pagesYesYesYes
Invite new membersYesYesNo
Re-send, suspend, restore or remove members (except owners)YesYesNo
Change a member between Developer and CustomYesYesNo
Grant or remove Administrator or OwnerYesNoNo
Buy API credit, add or update the payment method, start a plan purchaseYesYesNo
Set spend limits for individual members and groupsYesYesNo
Turn usage credits on or off, set the credit spend limit and auto-reloadYesNoNo
Set the monthly limit on automatic chargesYesNoNo
Cancel the plan or manage it in the billing portalYesNoNo
Assign or unassign seatsYesNoNo
Archive, restore or schedule deletion of the organizationYesNoNo
Transfer the Primary Owner rolePrimary Owner onlyNoNo

Nobody can change their own role.

Custom roles

A member with the Custom role gets whatever their groups and custom roles grant. Each grant covers an area, such as billing, user management, analytics, compliance or organization settings, at a level of none, view or manage. To check the exact permissions of a custom member, open their row’s ⋯ menu in Settings → Members and choose View effective role. (For built-in roles this option is greyed out, because their permissions are fixed.)

Settings tabs a member has no permission for are hidden from them, for example Audit Logs, Compliance, Admin Settings and Danger zone.

Was this page helpful?