Roles & Permissions
Understand the three team roles in WorkClaw — Owner, Admin, and Member — and what each role can do across team management, billing, Claws, and the vault.
What roles are available?
WorkClaw uses three roles to control what team members can do: Owner, Admin, and Member. Every person on a team holds exactly one role. Roles are assigned when a member is invited and can be changed later by an Owner or Admin.
What can each role do?
The table below shows the full permissions matrix.
| Capability | Owner | Admin | Member |
|---|---|---|---|
| Chat with team Claws | Yes | Yes | Yes |
| View team activity feed | Yes | Yes | Yes |
| Install / remove skills | Yes | Yes | No |
| Create and configure Claws | Yes | Yes | No |
| Manage connections | Yes | Yes | No |
| Invite members | Yes | Yes | No |
| Remove members | Yes | Yes | No |
| Change member roles | Yes | Yes (cannot promote to Admin) | No |
| Update team settings | Yes | Yes | No |
| Manage team vault secrets | Yes | Yes | No |
| View and change billing | Yes | No | No |
| Transfer ownership | Yes | No | No |
| Delete team | Yes | No | No |
How does the Owner role work?
Every team has exactly one Owner. The Owner has full control over the team, including billing, subscription changes, and the ability to delete the team entirely. Ownership can be transferred to another member from Settings > Team > Ownership. The previous Owner is demoted to Admin automatically.
How does the Admin role work?
Admins can do almost everything the Owner can — manage members, configure Claws, install skills, and manage vault secrets. The two things Admins cannot do are modify billing and delete the team. Admins are the right role for trusted managers or IT staff who need operational control without financial access.
How does the Member role work?
Members can chat with any team Claw, view the activity feed, and manage their own private Claws and vault entries. They cannot change team settings, install skills, or invite other members. This is the default role for anyone who joins via a multi-use link or domain invite.
How do I change someone's role?
Go to Settings > Team, find the member in the roster, and click the role badge next to their name. Select the new role from the dropdown. Only Owners and Admins can change roles, and only Owners can promote someone to Admin.