Skip to main content

Roles and Permissions for Team Members

Learn how to use default and custom roles to control what team members can access and manage within your workspace.

Written by Denitsa Zhelyazkova

Roles determine what team members can view, access, and manage in your workspace.

Kitchen includes three default roles and also allows you to create custom roles with tailored permissions, giving you full control over member access.

Accessing Roles

To manage roles:

  1. Go to Settings

  2. Select Roles & Permissions

Here, you'll see a list of all available roles in your workspace.

For each role, the list displays:

  • The role name

  • The number of members currently assigned to the role

  • The date the role was created


Default Roles

Every workspace includes the following default roles:

Owner

The Owner has full access to all workspace features, settings, resources, and member management options.

The workspace owner can also transfer ownership to another team member.

To change the workspace owner:

  1. Go to Settings

  2. Select Subscription

  3. Open Account Owner

  4. Search for a team member by name or email

  5. Select the new owner

Admin

Admins have access to all workspace permissions and settings, including:

  • Creating and managing resources

  • Managing clients and companies

  • Inviting and managing members

  • Creating and managing custom roles

  • Managing workspace settings and branding

  • Managing apps, API keys, and webhooks

  • Managing billing and subscription settings

  • Managing templates and custom fields

Admins have the same permissions as Owners.

The main difference is that Admins do not own the workspace and cannot be designated as the Account Owner unless ownership is transferred to them.

You can view the complete list of permissions by opening either role from the Roles & Permissions page.

Resources Admin

Owners and Admins have the Resources Admin permission enabled, which allows users to create, access, and manage all resources and files without requiring an explicit invitation.

Member

Members have access to standard workspace features and can create and manage resources based they own or have been invited to.

By default, Members can also:

  • Access, invite, edit and remove clients

  • Manage global custom fields

  • Manage contact forms

  • Install and manage apps and integrations

  • Create and manage all templates

  • Chat with support

However, Members do not have the Resources Admin permission and do not have access to certain administrative settings such as workspace branding, member and role management, billing, payments, and API & Webhooks.

To review the complete permission set, open the role from Settings → Roles & Permissions.

The default Owner, Admin, and Member roles cannot be deleted.


Creating a Custom Role

Custom roles allow you to create permission sets tailored to your team's responsibilities.

To create a custom role:

  1. Go to Settings -> Roles & Permissions

  2. Click Create Role

  3. Enter a role name

  4. Configure the desired permissions

  5. Choose whether to enable Resources Admin

  6. Click Save

The new role will appear in the roles list and can be assigned to team members.

Permissions assigned to a role apply to every team member using that role.

However, access to individual resources such as folders, boards, conversations, and documents is still controlled by resource sharing and invitations.

Team members can only access and manage resources they are invited to, unless their role includes the Resources Admin permission.


Changing a Team Member's Role

To assign a different role to a team member:

  1. Go to Settings

  2. Select Members

  3. Find the team member in the list

  4. Click their current role in the Workspace Role section

  5. Select a different role from the dropdown menu

The change takes effect immediately and the member will receive the permissions associated with the newly assigned role.


Managing a Custom Role

Click a custom role to view its details. From the role window, you can:

  • See members assigned to the role

  • View all assigned permissions

  • Update the role name

  • Enable or disable permissions

  • Delete the role

Any changes made to the role are automatically applied to all members currently assigned to it.


Deleting a Custom Role

To remove a custom role:

  1. Open the role

  2. Click Delete Role

  3. Confirm the action

If members are assigned to the role, you may be prompted to assign them a different role before the role can be deleted.

A role cannot be deleted while it is assigned to one or more team members. Reassign those members to a different role before deleting it.


Have more questions? Contact support.

Did this answer your question?