Available roles
Viewer
Read-only access to organization data. Cannot make changes.
Engineer
Can act on savings findings and manage technical resources.
Billing
Can view and manage billing, payment methods, and coupons.
Admin
Can manage organization settings, members, and integrations.
Owner
Full control of the organization, including deletion and ownership transfer. Each organization has exactly one owner.
Permissions by role
| Permission | Viewer | Engineer | Billing | Admin | Owner |
|---|---|---|---|---|---|
| View organization data | ✓ | ✓ | ✓ | ✓ | ✓ |
| Act on savings findings | ✓ | ✓ | ✓ | ||
| Activate savings | ✓ | ✓ | ✓ | ||
| View billing and invoices | ✓ | ✓ | ✓ | ||
| Update payment method | ✓ | ✓ | ✓ | ||
| Redeem coupons | ✓ | ✓ | ✓ | ||
| Manage members and invitations | ✓ | ✓ | |||
| Manage integrations | ✓ | ✓ | |||
| Update organization settings | ✓ | ✓ | |||
| Transfer ownership | ✓ | ||||
| Delete organization | ✓ |
Ownership
Every organization has exactly one owner. Only the owner can transfer ownership to another member or delete the organization. Ownership is transferred through an atomic flow, an admin cannot demote the owner or leave the organization without an owner.Changing a member’s role
Admins and owners can change roles from the members page in your organization settings. To change roles:- Open your organization settings.
- Go to Members.
- Select a member and choose a new role from the dropdown.
A member can always remove their own membership from an organization. Only admins and owners can remove other members.
Related
- Billing
- Required Permissions — the AWS IAM permissions MilkStraw AI uses in your cloud account.