Roles & Permissions

Clevername uses role-based access control (RBAC) to manage what each organization member can do. Five roles — owner, admin, manager, member, and viewer — provide graduated levels of access and control.

Key Concepts

Role hierarchy

Permission	Owner	Admin	Manager	Member	Viewer
View the org, its members, and its resources	Yes	Yes	Yes	Yes	Yes
Create and edit agents, keys, and other resources	Yes	Yes	Yes	Yes	No
Delete resources	Yes	Yes	No	No	No
Invite and remove members	Yes	Yes	Yes	No	No
Change member roles	Yes	Yes	Yes	No	No
Manage org settings	Yes	Yes	No	No	No
Read and export audit logs	Yes	Yes	No	No	No
Configure SSO	Yes	No	No	No	No
Delete organization	Yes	No	No	No	No

Role-based navigation

The dashboard sidebar adapts based on your role. Members see only the features they have access to. Admin-only sections like Settings and Members are hidden from regular members.

Step-by-Step Guide

View org members

Go to Organization → Members in the dashboard. You will see a list of all members with their email, role, and join date.

Organization members list showing name, email, role badge, and join date

The members list shows everyone in your org with their current role.

Change a member's role

Click the role badge next to a member's name. Select the new role from the dropdown. Role changes take effect immediately — the member's dashboard will update on their next page load.

Important

Owners, admins, and managers can change roles. Managers cannot modify owners or admins and can only assign the manager, member, or viewer roles. Promoting someone to admin requires a recent MFA step-up. The owner's own membership cannot be modified by anyone, and the owner role cannot be assigned.

Invite new members

Click Invite Member and enter the person's email address. Choose their initial role. They will receive an email invitation to join the organization. If they already have a Clevername account, they are added immediately.

Invite member dialog with email input and role selector

Invite members by email and assign their initial role.

Remove a member

Click the remove button next to a member's name. Confirm the removal. The member loses access to org resources immediately but retains their personal Clevername account.

Organizations Overview SSO Setup SCIM Provisioning