Overview

Every membership links one user to one team with exactly one role, and the four roles form a strict hierarchy from most to least privileged: team owner, team admin, team member, team viewer. Owners have the broadest control: they can update team settings, change the team’s ownership model, delete the team, and manage admin, member, and viewer memberships, though managing a fellow owner’s membership is reserved for the team’s billing owner; admins can update team settings and manage member and viewer memberships but cannot manage owners; members submit and work with items; viewers are read-only. Beyond that owner-to-owner exception, authority is layered so you can only change or remove a role below your own level, and the highest-consequence membership operations (role changes, member removal, ownership-model changes, team deletion) are reachable only through the web interface, never the programmatic APIs. Roles govern who can act within a team; the billing owner’s plan separately governs features and limits. See scope and tenancy for teams for each role’s exact rights and item ownership versus authorship for how roles interact with item rights.