Roles & Permissions
Ordaze uses role-based access control (RBAC) at the workspace level. Each member has exactly one role per workspace.
Roles
Owner
Full control over the workspace, billing, and members.
- Manage billing and subscription
- Transfer or delete the workspace
- Invite and remove members
- Change member roles
- All Admin permissions
Admin
Manage events, versions, settings, and members (except billing).
- Invite and remove members (except owner)
- Change member roles (up to admin)
- Manage workspace settings
- Manage webhooks and tokens
- All Editor permissions
Editor
Create, edit, and publish events and versions.
- Create and edit events
- Add and edit event properties
- Publish and manage versions
- Run scanner and view coverage
- Generate code
Read-only access to events, versions, and coverage.
- View events and properties
- View published versions
- View coverage reports
- View activity log
- Download generated code
Invitations
How invites work
- Owners and Admins can invite new members by email.
- Invites expire after 7 days. Expired invites must be resent.
- The invited user must sign in with the exact email address the invite was sent to.
- Admins cannot invite or promote users to Owner. Only the Owner can transfer ownership.