Role management and permissions

Assign roles per team and understand how permissions combine in GrowthLoop.

GrowthLoop roles control what a user can do in the team they are currently using. A user can have different roles on different teams, and can have more than one role on the same team. Within the active team, permissions from that user's assigned roles combine. Roles assigned on other teams do not add permissions in the active team.

📘

Note

This guide describes team-specific roles when enabled for your organization. If you still see a single Role dropdown for each user, your organization uses organization-level roles. Contact [email protected] for help with availability.

How roles work

For example, you can assign Admin on your Marketing team and User on your Analytics team to the same teammate. When they switch teams, GrowthLoop uses the roles assigned to that team.

You can see role labels beside teams in the team switcher and in Organization > Users and Teams. In Users, use Search to find teammates by role name as well as by name or email.

Built-in permissions

GrowthLoop includes three built-in roles. Your organization can also configure custom roles. The table below describes the standard roles; your organization's configuration can differ. Assign one or more roles separately for each team:

ActionUserAdminOwnerAction Definition
Create Audiences✅✅✅Creates audience
Edit Audiences✅✅✅Edits audiences*
Delete Audiences✅✅✅Deletes audiences*
View Audiences✅✅✅Views audience*
List Audiences✅✅✅Views list of all audiences*
Create Templates✅✅✅Creates templates
Edit Templates✅✅✅Edits templates
Delete Templates✅✅✅Deletes templates
Create Exports✅✅✅Exports audiences*
Update Exports✅✅✅Updates Exports*
CSV Exports❌✅✅Exports audiences to CSV (limited to < 300k records)
Create Destination✅✅✅Creates Destinations
Delete Destination✅✅✅Deletes Destinations
Create Studio✅✅✅Creates audiences in studio
Create Journey✅✅✅Creates journeys
Update Journeys✅✅✅Updates journeys
Delete Journeys✅✅✅Deletes journeys
Create Syncs✅✅✅Creates syncs
Update Syncs✅✅✅Updates syncs
View Activity❌✅✅Views activity across audiences and syncs in central dashboard
Create Datasets❌✅✅Creates Datasets
List Datasets❌✅✅Views a list of all Datasets
View Dataset❌✅✅Views details of a specific dataset
Update Dataset❌✅✅Updates Datasets
Create Dataset Groups❌✅✅Creates Dataset Groups
List Dataset Groups❌✅✅Views a list of all Dataset Groups
View Dataset Group❌✅✅Views a specific Dataset Group
Update Dataset Groups❌✅✅Updates Dataset Groups
PII Management❌✅✅Uses fields labeled as PII in exports for personalization of marketing messages
List Teams✅✅✅Views a list of all teams in organization
Edit Teams❌✅✅Adds or removes users from teams
Manage team roles❌✅✅Changes another user’s roles, subject to the restrictions below
List Users✅✅✅Views a list of all users in organization
Review Audiences❌✅✅Reviews and approves audiences for export
Refresh Source Connection❌✅✅Refreshes Source Connection
Create Sources❌✅✅Adds source ingests to Data Cloud
List Sources❌✅✅Views list of all source ingests
Create Invites❌❌✅Invites users to join organization
List Invites❌❌✅Sees list of all invites to organization
Create Storage❌❌✅Sets external storage configuration for exports
Update Notifications❌❌✅Sets who in the organization receives notifications
Update Share Settings❌❌✅Sets default audience share settings for organization
Create Source Connection❌❌✅Creates source connection for organization
List Source Connections❌❌✅Views list of all source connections
Update Source Connections❌❌✅Assigns Source Connections to specific teams and modifies logging settings
User activity audit logs❌✅✅Visibility of actions taken by any user

*Audiences that are shared with them as editor

Custom roles

📘

Note

Custom roles are available on GrowthLoop Enterprise plan

GrowthLoop roles can be customized for your enterprise teams. You can define custom roles for your organization with granular permissions on datasets, audiences, and other objects. The role definitions are available in your organization, but permissions apply to a user only on teams where you assign that role.

To request a custom role, choose the permissions you need and give the role a name. Contact your GrowthLoop representative to configure it.

Our team will configure the custom roles for your organization in GrowthLoop. You can assign one or more of those roles to a user's assignment on each team.

Assign roles to a teammate

You need role-management permission in your active team to change another user's roles. The standard Admin and Owner roles include this permission. Switch to a team where you have the appropriate permission before managing roles.

To change a teammate's roles:

  1. Open the profile dropdown in the header and select Organization, then select the Users tab.

  2. Select the user's row to open the user modal.

  3. Under Teams and roles, choose one or more roles for each team the user belongs to.

  4. Click Save. The changes apply to the selected teams only, and the organization views update without a page refresh. Reopen the user to verify the saved roles.

Use the permissions table above to compare the permissions associated with each built-in role. When a user has multiple roles on their active team, GrowthLoop combines the permissions from those roles. Permissions from roles assigned to other teams do not apply to the active team.

Role-management restrictions

  • Select at least one role for each team membership. To remove someone from a team, change their team membership.

  • Ask another authorized user to change your roles. Your own role editor is read-only.

  • With the standard Owner role in your active team, you can grant or remove roles, including Owner, for another user in your organization.

  • With the standard Admin role, you can manage other users' roles, but you cannot make someone an Owner for the first time in the organization or remove their last Owner role there. You can assign Owner on another team to someone who is already an Owner, or remove it from one team while they remain an Owner on another.

SSO and API access

If you use single sign-on (SSO), you can map identity-provider groups to teams and roles. Multiple matching groups can contribute roles to the same team. See SSO team and role mappings.

For integrations, use the effective team role arrays returned by the Users API and Me API. The legacy organization_role field remains for compatibility and does not describe a user's roles on every team.


Ready to manage team membership? Continue to Manage organizations and teams. For help with roles, contact [email protected].


What’s Next

Continue managing your team access.

Did this page help you?