Roles & Permissions

Diaform has five organization roles: Owner, Admin, Member, Read-only, and Billing. Organization roles control app-wide access. Project access settings can further restrict who can open a specific project, but they do not grant more access than the person's organization role allows.

Role Overview#

Owner#

The person who creates the organization is automatically assigned the Owner role. Owners have full access to the workspace, billing, organization settings, and protected administration actions.

Owners can also assign the Admin role, change admin access, remove admins, and delete the organization.

Admin#

Admins have owner-level workspace and organization management access, with protected limits:

Admins cannot assign the Admin role.
Admins cannot manage owners or other admins.
Admins cannot delete the organization.

Member#

Members can view and edit workspace/project content, create projects, view responses, and view organization settings and billing. Members cannot change organization settings, manage billing, invite or remove team members, or change roles.

Read-only#

Read-only users can view workspace/project content, responses, analytics, organization settings, billing, domains, team, and webhooks. They cannot make changes, save project edits, create projects, open Stripe management flows, or change subscriptions.

Billing#

Billing users can view billing pages only. They cannot access projects, responses, analytics, organization settings, team settings, domains, or webhooks.

Permission Comparison#

Permission	Owner	Admin	Member	Read-only	Billing
View projects and responses	Yes	Yes	Yes	Yes	No
Create and edit projects	Yes	Yes	Yes	No	No
Access all projects by default	Yes	Yes	Project access rules apply	Project access rules apply	No
Manage project access	Yes	Yes	Creator only	No	No
View organization settings	Yes	Yes	Yes	Yes	No
Change organization settings	Yes	Yes	No	No	No
View billing	Yes	Yes	Yes	Yes	Yes
Manage subscription or Stripe portal	Yes	Yes	No	No	No
Buy top-up credits	Yes	Yes	No	No	No
Invite team members	Yes	Yes	No	No	No
Assign Admin role	Yes	No	No	No	No
Manage admins	Yes	No	No	No	No
Remove members/read-only/billing users	Yes	Yes	No	No	No
Delete organization	Yes	No	No	No	No

Team Administration Rules#

Owners can invite admins, members, read-only users, and billing users. Admins can invite members, read-only users, and billing users. The Owner role cannot be assigned through invitations.

Owners can manage every non-owner user, including admins. Admins can manage members, read-only users, and billing users, but not owners or admins.

Project Access Rules#

Projects are All organization members by default. In that mode, every non-billing user who can view the workspace can open the project.

Projects can also be restricted to selected users. In restricted mode:

Owners and admins can always open and edit every project.
The project creator can always open, edit, and manage access for that project.
Selected users can be given Read only or Read + edit access.
A read-only organization user remains read-only even if a project access row says "Read + edit".
Billing users cannot access projects.

See Project Access for details.

Ownership Transfer#

Ownership cannot currently be transferred directly in the product. If you need to transfer ownership of your organization, contact support.