# Assign standard roles

Account Admins grant team members access to workspaces by assigning them workspace-level roles. A standard role comes with a defined set of permissions. To create roles with custom permission sets, check out [Custom roles](/accounts-and-workspaces/create-roles/).

## Overview[](#overview)

You can assign standard roles to team members from Workspace Settings or from [*Account Settings > Team Members*](/accounts-and-workspaces/intro-account-access/#add-team-members).

A workspace-level role controls the set of permissions a team member has in a single workspace. We offer three **standard roles**:

*   Workspace Admin (full access)
*   Author (partial access)
*   Viewer (view-only access)

When you assign Author or Viewer roles, you choose whether to limit their [access to sensitive data](#hide-sensitive-attributes). This helps you keep your account as secure as possible.

Remember that before you specify workspace-level persmissions, you have to choose an account-level permission: Account Admin or Member. **Account Admins** are always **Workspace Admins** in every workspace. This ensures Account Admins have full rights across each of your workspaces. **Members** can have different workspace-level roles for each workspace they have access to.

### Workspace Admin[](#workspace-admin)

Workspace Admins have full access to all settings and features in a workspace. This is **the only workspace-level role that can:**

*   Import or export user data
*   Manage integrations
*   Manage [Webhook configurations](/journeys/webhook-manager/)
*   Create, edit, or delete collections
*   Mark attributes as sensitive in the Data Index and hide them from Authors or Viewers

They cannot create or delete workspaces; only Account Admins can.

### Author[](#author)

Authors have partial access to workspace settings and features. They can manage some features like content and campaigns, but only view others like collections. They can create individual webhooks in campaigns, but can’t create or manage reusable webhooks in workspace settings.

Account and Workspace Admins can decide whether to [hide sensitive attribute data](#hide-sensitive-attributes) from authors.

 Authors with sensitive data hidden can’t edit people

Authors with sensitive data hidden have the same functionality as authors who can view all data, with one exception: they can’t edit people.

### Viewer[](#viewer)

Viewers have no access to workspace settings and partial access to workspace features. They have view-only permissions to all workflows, content, and data in a workspace.

Account and Workspace Admins can decide whether to [hide sensitive attribute data](#hide-sensitive-attributes) from viewers.

## Compare permissions across standard roles[](#compare-permissions-across-standard-roles)

### Workspace settings[](#workspace-settings)

Permission

Workspace  
Admin

Author

Viewer

General Workspace Settings[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#general-workspace-settings)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Messaging Settings[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#messaging-settings)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Email Suppression List[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#email-suppression-list)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Unsuppress

*check\_circle*

*highlight\_off*

*highlight\_off*

Export

*check\_circle*

*highlight\_off*

*highlight\_off*

Language Settings[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#language-settings)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Merge Options[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#merge-options)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Message Limit[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#message-limit)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Subscription Center[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#subscription-center)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Time Zone Match[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#time-zone-match)

Test

*check\_circle*

*check\_circle*

*highlight\_off*

URL Parameters[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#url-parameters)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Webhook configuration[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#webhook-configuration)

View

*check\_circle*

*highlight\_off*

*highlight\_off*

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

### Journeys[](#journeys-permissions)

Permission

Workspace  
Admin

Author

Viewer

Send messages

*check\_circle*

*check\_circle*

*highlight\_off*

Campaigns[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#campaigns)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Broadcasts[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#broadcasts)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Transactional Messages[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#transactional-messages)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Deliveries & Drafts[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#deliveries-amp-drafts)

View

*check\_circle*

*check\_circle*

*check\_circle*

People[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#people)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update1

*check\_circle*

*check\_circle*1

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Object Types[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#object-types)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Objects and Relationships[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#objects-and-relationships)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Segments[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#segments)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Import CSV

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Ad Audiences[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#ad-audiences)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Integrate

*check\_circle*

*highlight\_off*

*highlight\_off*

Pause

*check\_circle*

*check\_circle*

*highlight\_off*

Resume

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Activity Logs[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#activity-logs)

View

*check\_circle*

*check\_circle*

*check\_circle*

Data Index[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#data-index)

View

*check\_circle*

*check\_circle*

*check\_circle*

Update attribute descriptions

*check\_circle*

*highlight\_off*

*highlight\_off*

Export

*check\_circle*

*highlight\_off*

*highlight\_off*

Tags in the data index[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#tags-in-the-data-index)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign

*check\_circle*

*highlight\_off*

*highlight\_off*

Remove

*check\_circle*

*highlight\_off*

*highlight\_off*

Integrations[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#integrations)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*highlight\_off*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Data Import/Export[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#data-importexport)

Import

*check\_circle*

*highlight\_off*

*highlight\_off*

Export

*check\_circle*

*highlight\_off*

*highlight\_off*

Message Library[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#message-library)

View

*check\_circle*

*check\_circle*

*check\_circle*

Assets[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#assets)

View

*check\_circle*

*check\_circle*

*check\_circle*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Upload

*check\_circle*

*check\_circle*

*highlight\_off*

Email Layouts[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#email-layouts)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

In-app Message Library[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#in-app-message-library)

View

*check\_circle*

*check\_circle*

*check\_circle*

Snippets[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#snippets)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Collections[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#collections)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Design Studio - Styles[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#design-studio---styles)

View

*check\_circle*

*check\_circle*

*check\_circle*

Create

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Design Studio - Files[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#design-studio---files)

View

*check\_circle*

*check\_circle*

*check\_circle*

Export

*check\_circle*

*check\_circle*

*check\_circle*

Create

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Design Studio - Feedback[](https://docs.customer.io/accounts-and-workspaces/assign-standard-roles/#design-studio---feedback)

Feedback mode

*check\_circle*

*check\_circle*

*check\_circle*

1Authors with [sensitive attributes hidden](#hide-sensitive-attributes) cannot edit people

## Hide sensitive attributes[](#hide-sensitive-attributes)

[Premium This feature is available for Premium plans.](/accounts-and-workspaces/plan-features/) [Enterprise This feature is available for Enterprise plans.](/accounts-and-workspaces/plan-features/)

If you’re on a Premium or Enterprise plan, then Account and Workspace Admins can mark profile attributes as “sensitive” in the Data Index and decide whether to hide this data from team members. This redacts values but not attribute names from the workspace.

### Mark attributes as sensitive[](#mark-attributes-as-sensitive)

Account admins and workspace admins can mark profile attributes as sensitive in the [Data Index](https://fly.customer.io/workspaces/last/journeys/data-index/attributes). This redacts values but not attributes names from the workspace and helps ensure data privacy across team members. If you have a custom role that includes the [Edit permission for the Data Index](/accounts-and-workspaces/create-roles/#data-index), you can also mark attributes as sensitive.

You can also mark event attributes as sensitive independently. In the *Events* tab, select an event to find its attributes and mark them as sensitive. Profile and event attributes are separate—marking a profile attribute as sensitive doesn’t automatically redact event attributes with the same name.

1.  In the *Attributes* tab, click an attribute.
2.  Click **Edit** in the panel.
3.  Click “Make sensitive.” To unhide sensitive attributes, select the box to uncheck it.
    
     Not seeing *Make sensitive*?
    
    Check that you’re an Account Admin or Workspace Admin in [Team Members](https://fly.customer.io/settings/team). If you are, then check whether you’re on a [Premium or Enterprise plan](https://fly.customer.io/settings/billing/your-plan) or reach out to someone with billing access. Otherwise, you’ll have to upgrade for access.
    
4.  Click **Save**.
5.  Next, assign “Hide sensitive attributes” to team members.

### Choose “Hide sensitive attributes” when assigning standard roles[](#choose-hide-sensitive-attributes-when-assigning-standard-roles)

After an admin marks attributes as sensitive in the Data Index, they must update Authors or Viewers so they can’t view these sensitive attributes:

1.  Go to [Workspace Settings](https://fly.customer.io/workspaces/last/settings/edit).
2.  Scroll to the bottom section “Who should have access?”
3.  Change the dropdown from “Show all attributes” to “Hide sensitive attributes” for each team member.

If you’re an Account Admin, you can also assign this from [Team Members](https://fly.customer.io/settings/team):

1.  Under **Workspace level permissions**, specify Author or Viewer for workspaces.
    
    [![team-member-hide-sensitive.png](https://docs.customer.io/images/team-member-hide-sensitive.png)](#2687704f9368389bcb727930102f1619-lightbox)
    
2.  Choose **Hide sensitive attributes** from the dropdown.
3.  Save or invite your team member.

These team members will now see values redacted for sensitive attributes. If they send test messages or webhooks from your workspace, those messages and responses will also contain redacted values.

 Authors with sensitive data hidden can’t edit people

Authors with sensitive data hidden have the same functionality as Authors who can view all data, with one exception: they can’t edit people.

 Do you see the option *Hide all attributes*?

If so, this is a legacy feature and you can learn more about [how this limits authors access to data and functionality](/accounts-and-workspaces/legacy-permissions/#prevent-team-members-from-viewing-profile-and-event-data).