Roles and permissions

Every person in an organization has one role: owner, admin, member or viewer. The role decides which controls work for you. Reading is open to every role. Changing things is not.

What each role is for

Owner. Runs the organization. Everything an admin can do, plus delete the organization and hand out the owner role. Every organization keeps at least one owner.
Admin. Sets up and pays for the workspace: bills, budgets, API keys, scorer settings, people, and organization settings.
Member. Does the day-to-day work: starts eval and replay runs, writes custom scorers, sets alert rules and CI policies, marks trace outcomes, saves test cases and answers Verify checks.
Viewer. Reads everything the organization shares. Cannot change shared work. Can still change their own preferences and comment on traces.

What each role can do

“Yes” means the control works. “Read” means you can see it but not change it.

Area	Control or action	Owner	Admin	Member	Viewer
Your own preferences	Weekly brief on or off, notification email and in-app preferences	Yes	Yes	Yes	Yes
Traces	Read traces, agents, costs and reports	Yes	Yes	Yes	Yes
	Comment on a trace, edit or delete your own comment	Yes	Yes	Yes	Yes
	Delete any comment on a trace	Yes	Yes	No	No
	Mark a trace outcome	Yes	Yes	Yes	No
	Delete a trace or an agent	Yes	Yes	No	No
Evals and scorers	Start an eval or replay run	Yes	Yes	Yes	No
	Create, edit or delete a custom scorer	Yes	Yes	Yes	No
	Save test cases	Yes	Yes	Yes	No
	Scorer on or off, scorer sample rates	Yes	Yes	Read	Read
	Rule-based scorers (create, edit, delete), label taxonomies	Yes	Yes	Read	Read
	Create a CI policy	Yes	Yes	Yes	No
	Import external eval results	Yes	Yes	No	No
Verify and follow-ups	Answer a Verify check, confirm or dismiss a detected change, set the questions you track	Yes	Yes	Yes	No
	Turn automatic change tracking on or off	Yes	Yes	Read	Read
	Set up outcome rules for an agent	Yes	Yes	Read	Read
Cost and budgets	Read cost, budgets and spend	Yes	Yes	Yes	Yes
	Create, edit or delete a budget or spend guard	Yes	Yes	Read	Read
	Upload or delete a provider bill	Yes	Yes	Read	Read
	Set up `customer_id` mapping and customer revenue	Yes	Yes	Read	Read
	Add or delete a custom price rate	Yes	Yes	No	No
Alerts and reliability	Create, edit or delete an organization alert rule	Yes	Yes	Yes	No
	Open or update an incident	Yes	Yes	Yes	No
	Merge, split or ignore an error group	Yes	Yes	Yes	No
Security and privacy	Change security settings, allowlists, download evidence	Yes	Yes	No	No
	Save security test cases	Yes	Yes	Yes	No
	Erase an end user’s data	Yes	Yes	No	No
Sharing and reports	Create or revoke a public share link (weekly brief)	Yes	Yes	No	No
	Create, schedule or approve client reports	Yes	Yes	No	No
Organization	See the member list, invite people, change roles, remove members	Yes	Yes	No	No
	Invite or promote someone to owner	Yes	No	No	No
	Read the audit log	Yes	Yes	No	No
	API keys for the organization’s environments	Yes	Yes	No	No
	Infra span capture toggles, workspace and organization settings, integrations	Yes	Yes	No	No
	Delete the organization	Yes	No	No	No

Two rules sit across the table. A viewer is refused every write that shared work needs, whatever the page. In demo mode every write is off for everyone, because demo data is read-only.

What you see when a control is off

Morse switches the control off and says why, next to it and in its tooltip. The words are fixed:

Who is blocked	Sentence
Member or viewer, on an owner and admin control	Only an owner or admin can change this.
Viewer, on a member control	Viewers can’t change this. Ask an owner or admin to change your role.
Anyone, in demo mode	Demo data is read-only.
Member, on the Team tab	Only owners and admins can see the member list, invite people or change roles.

If the page cannot read your role, the control stays on and the server’s answer (“Owner or admin access required”, “Write access required”) appears instead.

Inviting people

In the invite form, pick the role. Each choice shows a one-line description:

Viewer: can view data but can’t change anything.
Member: can view data and make changes, but can’t invite people or change organization settings.
Admin: everything a member can do, plus inviting people, changing roles and organization settings.

Only an owner can make someone an owner. Admins invite admins, members and viewers. See Workspace for the Team tab.