> ## Documentation Index
> Fetch the complete documentation index at: https://docs.milkstraw.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# MilkStraw AI' internal roles

> Understand the roles you can assign to members of your organization and what each role is allowed to do.

MilkStraw AI uses role-based access control to determine what each member of your organization can see and do. Every member has exactly one role, which is assigned when they are invited and can be changed later by a manager.

## Available roles

<CardGroup cols={2}>
  <Card title="Viewer" icon="eye">
    Read-only access to organization data. Cannot make changes.
  </Card>

  <Card title="Engineer" icon="wrench">
    Can act on savings findings and manage technical resources.
  </Card>

  <Card title="Billing" icon="credit-card">
    Can view and manage billing, payment methods, and coupons.
  </Card>

  <Card title="Admin" icon="user-gear">
    Can manage organization settings, members, and integrations.
  </Card>

  <Card title="Owner" icon="crown">
    Full control of the organization, including deletion and ownership transfer. Each organization has exactly one owner.
  </Card>
</CardGroup>

## Permissions by role

| Permission                     | Viewer | Engineer | Billing | Admin | Owner |
| ------------------------------ | :----: | :------: | :-----: | :---: | :---: |
| View organization data         |    ✓   |     ✓    |    ✓    |   ✓   |   ✓   |
| Act on savings findings        |        |     ✓    |         |   ✓   |   ✓   |
| Activate savings               |        |     ✓    |         |   ✓   |   ✓   |
| View billing and invoices      |        |          |    ✓    |   ✓   |   ✓   |
| Update payment method          |        |          |    ✓    |   ✓   |   ✓   |
| Redeem coupons                 |        |          |    ✓    |   ✓   |   ✓   |
| Manage members and invitations |        |          |         |   ✓   |   ✓   |
| Manage integrations            |        |          |         |   ✓   |   ✓   |
| Update organization settings   |        |          |         |   ✓   |   ✓   |
| Transfer ownership             |        |          |         |       |   ✓   |
| Delete organization            |        |          |         |       |   ✓   |

## Ownership

Every organization has exactly one owner. Only the owner can transfer ownership to another member or delete the organization. Ownership is transferred through an atomic flow, an admin cannot demote the owner or leave the organization without an owner.

## Changing a member's role

Admins and owners can change roles from the members page in your organization settings. To change roles:

1. Open your organization settings.
2. Go to **Members**.
3. Select a member and choose a new role from the dropdown.

<Note>
  A member can always remove their own membership from an organization. Only admins and owners can remove other members.
</Note>

## Related

* [Billing](/billing)
* [Required Permissions](/permissions) — the AWS IAM permissions MilkStraw AI uses in your cloud account.