Skip to main content

Subscription user roles and permissions

Using roles to manage user permissions

Users (logins) and workspaces (collections of data sources, business logic and destination configurations) belong to subscriptions in Funnel. A user can have access to one or multiple workspaces. What features a user can use depends on their subscription and workspace roles.

Understanding the two-tier role system

Funnel uses two separate layers of access control:

  1. Subscription-level roles (Owner, Administrator and Member) — control who can manage the subscription itself, including inviting users, handling billing, and changing settings.

  2. Workspace-level roles (Workspace Administrator, Editor, Viewer) — control what data, connectors, and dashboards a user can see and edit within a specific workspace.

Important: Adding someone to your subscription does not automatically give them access to any workspace. After inviting a user, an Owner, Admin, or Workspace Administrator must also grant them access to the appropriate workspace(s).

Subscription-level roles

In short:

Permission

Owner

Admin

Member

Guest

Access granted workspaces

Create workspaces

Delete workspaces

Invite users to subscription

Remove users from subscription

Assign roles (Admin, Member)

Manage billing & plan changes

View invoices

Be promoted to Owner/Admin/Member

* Guests cannot be promoted to Member, Admin, or Owner while they remain a full member of another subscription.

Owner

Owner

The Owner has full control of the subscription, including:

  • Managing billing, invoices, and subscription plan changes

  • Viewing invoice history

  • Inviting and removing users

  • Assigning or changing roles for all users (including promoting others to Owner)

  • Creating and deleting workspaces

  • Accessing all workspaces within the subscription

  • Adding/removing users to any workspace within the subscription

  • Seeing all users within the subscription

A subscription can have multiple Owners at the same time.

Only Owners can:

  • Access and manage billing

  • Assign or transfer the Owner role

Changing subscription owner(s)

This is a self-serve action, it does not require Funnel Support.

  1. Log in as a current Owner.

  2. Go to Settings → Users.

  3. If the new Owner isn't on the subscription yet, invite them first and wait for them to accept.

  4. Click their name and change their role to Owner.

Requirements:

  • Only a current Owner can perform this action.

  • The new Owner cannot already be a full Member or Owner of another Funnel subscription. If they are, they must be removed from (or downgraded to Guest on) that other subscription first.

  • Assigning a new Owner does not remove existing Owners.

  • If the original Owner has left your company and no one else has the Owner role, contact Funnel Support for assistance.

Administrator

Can manage most day-to-day subscription settings, including:

  • Accessing all workspaces within the subscription

  • Adding/removing users to any workspace within the subscription

  • Seeing all users within the subscription

  • Assigning roles (except the Owner role)

  • Creating and deleting workspaces

Administrators cannot:

  • Access or manage billing, invoices, or plan changes (this is Owner-only)

  • Assign or transfer the Owner role

Member

Members have basic access to the subscription but limited management capabilities.

Members can:

  • Access workspaces they've been granted access to

  • Use Funnel features within their assigned workspaces

Members cannot:

  • Invite new users to the subscription

  • Create new workspaces

  • Change other users' roles

If you need to invite a colleague or create a workspace, ask an Owner or Admin to do this for you.

Guest

Guest is not a role you assign, it is applied automatically when a user who already belongs to another Funnel subscription is invited to yours.

Because a user can only be a full Member or Owner on one subscription at a time, users from other subscriptions are given Guest status on yours.

Guests can:

  • Access workspaces they've been explicitly granted access to

Guests cannot:

  • Be promoted to Member, Admin, or Owner while they remain a full member of another subscription

To make a Guest a full Member or Admin, they must first be removed from (or downgraded to Guest on) their other subscription.

Workspace-level roles

After a user is added to your subscription, they must also be granted access to one or more workspaces. New users will see an empty account until this step is completed.

Workspace roles (Workspace Administrator, Editor, and Viewer) control what a user can see and do within a specific workspace. For full details, see Workspace user roles.

Did this answer your question?