> This page is part of the [Customer.io documentation](https://docs.customer.io). For the complete index, see [llms.txt](https://docs.customer.io/llms.txt).

# Assign standard roles

Account Admins grant team members access to workspaces by assigning them workspace-level roles. A standard role comes with a defined set of permissions. To create roles with custom permission sets, check out [Custom roles](/accounts/settings/team/create-roles/).

## Overview

You can assign standard roles to team members from Workspace Settings or from [*Account Settings > Team Members*](/accounts/settings/team/intro-account-access/#add-team-members).

A workspace-level role controls the set of permissions a team member has in a single workspace. We offer three **standard roles**:

*   Workspace Admin (full access)
*   Author (partial access)
*   Viewer (view-only access)

When you assign Author or Viewer roles, you choose whether to limit their [access to sensitive data](#hide-sensitive-attributes). This helps you keep your account as secure as possible.

Remember that before you specify workspace-level persmissions, you have to choose an account-level permission: Account Admin or Member. **Account Admins** are always **Workspace Admins** in every workspace. This ensures Account Admins have full rights across each of your workspaces. **Members** can have different workspace-level roles for each workspace they have access to.

### Workspace Admin

Workspace Admins have full access to all settings and features in a workspace. This is **the only workspace-level role that can:**

*   Import or export user data
*   Manage integrations
*   Manage [Webhook configurations](/messaging/send/workflows/webhooks/manager/)
*   Create, edit, or delete collections
*   Mark attributes as sensitive in the Data Index and hide them from Authors or Viewers

They cannot create or delete workspaces; only Account Admins can.

### Author

Authors have partial access to workspace settings and features. They can manage some features like content and automations, but only view others like collections. They can create individual webhooks in automations, but can’t create or manage reusable webhooks in workspace settings.

Account and Workspace Admins can decide whether to [hide sensitive attribute data](#hide-sensitive-attributes) from authors.

Authors with sensitive data hidden can't edit profiles

Authors with sensitive data hidden have the same functionality as authors who can view all data, with one exception: they can’t edit profiles.

### Viewer

Viewers have no access to workspace settings and partial access to workspace features. They have view-only permissions to all workflows, content, and data in a workspace.

Account and Workspace Admins can decide whether to [hide sensitive attribute data](#hide-sensitive-attributes) from viewers.

## Compare permissions across standard roles

### Workspace settings

Permission

Workspace
Admin

Author

Viewer

General Workspace Settings[](#general-workspace-settings)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Messaging Settings[](#messaging-settings)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Email Suppression List[](#email-suppression-list)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Unsuppress

*check\_circle*

*highlight\_off*

*highlight\_off*

Export

*check\_circle*

*highlight\_off*

*highlight\_off*

Language Settings[](#language-settings)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Merge Options[](#merge-options)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Message Limit[](#message-limit)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Subscription Center[](#subscription-center)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Time Zone Match[](#time-zone-match)

Test

*check\_circle*

*check\_circle*

*highlight\_off*

URL Parameters[](#url-parameters)

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Webhook configuration[](#webhook-configuration)

View

*check\_circle*

*highlight\_off*

*highlight\_off*

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

### Journeys

Permission

Workspace
Admin

Author

Viewer

Send messages

*check\_circle*

*check\_circle*

*highlight\_off*

Automations[](#automations)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Broadcasts[](#broadcasts)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Transactional Messages[](#transactional-messages)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Message activity[](#message-activity)

View

*check\_circle*

*check\_circle*

*check\_circle*

Profiles[](#profiles)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update1

*check\_circle*

*check\_circle*1

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Object Types[](#object-types)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Objects and Relationships[](#objects-and-relationships)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Segments[](#segments)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Import CSV

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Geofences[](#geofences)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Ad Audiences[](#ad-audiences)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Integrate

*check\_circle*

*highlight\_off*

*highlight\_off*

Pause

*check\_circle*

*check\_circle*

*highlight\_off*

Resume

*check\_circle*

*check\_circle*

*highlight\_off*

Assign/Unassign Tags

*check\_circle*

*check\_circle*

*highlight\_off*

Profile activity[](#profile-activity)

View

*check\_circle*

*check\_circle*

*check\_circle*

Data Index[](#data-index)

View

*check\_circle*

*check\_circle*

*check\_circle*

Update attribute descriptions

*check\_circle*

*highlight\_off*

*highlight\_off*

Export

*check\_circle*

*highlight\_off*

*highlight\_off*

Tags in the data index[](#tags-in-the-data-index)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Assign

*check\_circle*

*highlight\_off*

*highlight\_off*

Remove

*check\_circle*

*highlight\_off*

*highlight\_off*

Integrations[](#integrations)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*highlight\_off*

*highlight\_off*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Data Import/Export[](#data-importexport)

Import

*check\_circle*

*highlight\_off*

*highlight\_off*

Export

*check\_circle*

*highlight\_off*

*highlight\_off*

Message Library[](#message-library)

View

*check\_circle*

*check\_circle*

*check\_circle*

Assets[](#assets)

View

*check\_circle*

*check\_circle*

*check\_circle*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Upload

*check\_circle*

*check\_circle*

*highlight\_off*

Email Layouts[](#email-layouts)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

In-app Message Library[](#in-app-message-library)

View

*check\_circle*

*check\_circle*

*check\_circle*

Snippets[](#snippets)

Create

*check\_circle*

*check\_circle*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Collections[](#collections)

Create

*check\_circle*

*highlight\_off*

*highlight\_off*

View

*check\_circle*

*check\_circle*

*check\_circle*

Update

*check\_circle*

*highlight\_off*

*highlight\_off*

Delete

*check\_circle*

*highlight\_off*

*highlight\_off*

Design Studio - Styles[](#design-studio-styles)

View

*check\_circle*

*check\_circle*

*check\_circle*

Create

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Design Studio - Files[](#design-studio-files)

View

*check\_circle*

*check\_circle*

*check\_circle*

Export

*check\_circle*

*check\_circle*

*check\_circle*

Create

*check\_circle*

*check\_circle*

*highlight\_off*

Update

*check\_circle*

*check\_circle*

*highlight\_off*

Delete

*check\_circle*

*check\_circle*

*highlight\_off*

Design Studio - Feedback[](#design-studio-feedback)

Feedback mode

*check\_circle*

*check\_circle*

*check\_circle*

Authors with [sensitive attributes hidden](#hide-sensitive-attributes) cannot edit profiles

## Hide sensitive attributes

If you’re on a Premium or Enterprise plan, then Account and Workspace Admins can mark profile attributes as “sensitive” in the Data Index and decide whether to hide this data from team members. This redacts values but not attribute names from the workspace.

### Mark attributes as sensitive

Account admins and workspace admins can mark profile attributes as sensitive in the [Data Index](https://fly.customer.io/workspaces/last/journeys/data-index/attributes). This redacts values but not attributes names from the workspace and helps ensure data privacy across team members. If you have a custom role that includes the [Edit permission for the Data Index](/accounts/settings/team/create-roles/#data-index), you can also mark attributes as sensitive.

You can also mark event attributes as sensitive independently. In the *Events* tab, select an event to find its attributes and mark them as sensitive. Profile and event attributes are separate—marking a profile attribute as sensitive doesn’t automatically redact event attributes with the same name.

1.  In the *Attributes* tab, click an attribute.
2.  Click **Edit** in the panel.
3.  Click “Make sensitive.” To unhide sensitive attributes, select the box to uncheck it.

    Not seeing *Make sensitive*?

    Check that you’re an Account Admin or Workspace Admin in [Team Members](https://fly.customer.io/settings/team). If you are, then check whether you’re on a [Premium or Enterprise plan](https://fly.customer.io/settings/billing/your-plan) or reach out to someone with billing access. Otherwise, you’ll have to upgrade for access.

4.  Click **Save**.
5.  Next, assign “Hide sensitive attributes” to team members.

### Choose “Hide sensitive attributes” when assigning standard roles

After an admin marks attributes as sensitive in the Data Index, they must update Authors or Viewers so they can’t view these sensitive attributes:

1.  Go to [Workspace Settings](https://fly.customer.io/workspaces/last/settings/edit).
2.  Scroll to the bottom section “Who should have access?”
3.  Change the dropdown from “Show all attributes” to “Hide sensitive attributes” for each team member.

If you’re an Account Admin, you can also assign this from [Team Members](https://fly.customer.io/settings/team):

1.  Under **Workspace level permissions**, specify Author or Viewer for workspaces.

     ![/images/team-member-hide-sensitive.png](https://docs.customer.io/images/team-member-hide-sensitive.png)

2.  Choose **Hide sensitive attributes** from the dropdown.
3.  Save or invite your team member.

These team members will now see values redacted for sensitive attributes. If they send test messages or webhooks from your workspace, those messages and responses will also contain redacted values.

Authors with sensitive data hidden can't edit profiles

Authors with sensitive data hidden have the same functionality as Authors who can view all data, with one exception: they can’t edit profiles.

Do you see the option *Hide all attributes*?

If so, this is a legacy feature and you can learn more about [how this limits authors access to data and functionality](/accounts/settings/legacy-permissions/#prevent-team-members-from-viewing-profile-and-event-data).

©2026 Peaberry Software, Inc. [Status](https://status.customerio.com/) [Terms of Service](https://customer.io/legal/terms-of-service/) [Privacy Policy](https://customer.io/legal/privacy-policy/)

[](https://www.linkedin.com/company/customer-io)[](https://twitter.com/customerio)[](https://www.youtube.com/channel/UCkCaWdezRoa8ZyR9pEVaipA)[](https://www.instagram.com/customer.io/)