> ## Documentation Index
> Fetch the complete documentation index at: https://docs.growthxai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and Permissions

> What Owners, Managers, Members and Client viewers can see and do.

Everyone in a workspace has one of four roles. The app hides what your role can't do, and the same rules are enforced on the server and in the Claude connector.

| Role              | In short                                                          |
| ----------------- | ----------------------------------------------------------------- |
| **Owner**         | Everything, including billing, members and webhooks               |
| **Manager**       | Senders, sequences, leads and exports                             |
| **Member**        | Leads, tasks and the inbox, optionally limited to certain clients |
| **Client viewer** | Read-only inbox and stats for their own client                    |

## What each role can do

|                                                                    | Owner | Manager |       Member       |      Client viewer      |
| ------------------------------------------------------------------ | :---: | :-----: | :----------------: | :---------------------: |
| Billing, members                                                   |   ✓   |         |                    |                         |
| White-label: branding and custom domains                           |   ✓   |         |                    |                         |
| Workspace behavior settings                                        |   ✓   |         |                    |                         |
| Connect, pause and disable senders; edit schedules, caps and proxy |   ✓   |    ✓    |                    |                         |
| Build, publish, activate and archive sequences                     |   ✓   |    ✓    |                    |                         |
| Manage clients and blacklists; delete stages                       |   ✓   |    ✓    |                    |                         |
| AI variables, AI provider key, email finder keys                   |   ✓   |    ✓    |                    |                         |
| Tracking domains, booking webhooks                                 |   ✓   |    ✓    |                    |                         |
| API keys, webhooks, CRM integrations                               |   ✓   |    ✓    |                    |                         |
| Report schedules                                                   |   ✓   |    ✓    |                    |                         |
| Export CSVs; view the audit log                                    |   ✓   |    ✓    |                    |                         |
| Import, edit, tag and enroll leads; work tasks                     |   ✓   |    ✓    |          ✓         |                         |
| Approve AI-written lines                                           |   ✓   |    ✓    |          ✓         |                         |
| Recover failed leads                                               |   ✓   |    ✓    |          ✓         |                         |
| Read the inbox                                                     |   ✓   |    ✓    |          ✓         |        Own client       |
| Reply in the inbox                                                 |   ✓   |    ✓    | With **can reply** |    With **can reply**   |
| Reports                                                            |   ✓   |    ✓    |     ✓ (scoped)     | Own client, no Cost tab |

Client viewers don't see the Senders, Sequences, Tasks, AI review or Clients tabs.

## API keys act as a person

An [API key](/integrations-api/public-api) belongs to the member who created it and can never do more than that person can. Lower their role, or remove them from the workspace, and the key loses the same rights immediately. A key is never an Owner.

## Can reply

Separately from the role, each membership has a **Can reply** switch. It's on by default. Turn it off in [Members](/subscription-and-billing/team-management) for someone who should read conversations but not answer them.

## Client scope

Members and Client viewers can be limited to one or more [clients](/agencies-and-clients/clients-and-client-portal). They then see only those clients' senders, leads and conversations. A Member or Client viewer with an empty scope sees all clients. Owners and Managers always see everything.

<Tip>
  Always limit a Client viewer to a single client.
</Tip>

## Suspended workspaces

If a workspace is suspended for non-payment, it becomes read-only for every role and all senders pause. See [Billing](/subscription-and-billing/subscription-management).

## Related articles

* [Team Management](/subscription-and-billing/team-management)
* [Clients and the Client Portal](/agencies-and-clients/clients-and-client-portal)
* [The Public API](/integrations-api/public-api)