--- title: "Roles & Permissions in Mailercloud" description: "Control exactly who can access what in your workspace. This guide explains how Mailercloud's built-in access control system works, the five available roles, and how to add, invite, and customise teammates." url: https://help.mailercloud.com/en/articles/174-roles-and-permissions-in-mailercloud collection: "Account settings" updated: 2026-09-28 language: en --- # Roles & Permissions in Mailercloud Control exactly who can access what in your workspace. This guide explains how Mailercloud's built-in access control system works, the five available roles, and how to add, invite, and customise teammates. ## What are Roles & Permissions? Every Mailercloud workspace has a built-in access control system that lets the workspace Owner give every team member exactly the access they need — and nothing more. When you add a teammate to your account, you assign them a **role** that decides which pages they can open and which actions they can take. You can further fine-tune access on a per-user basis using the **Permission Picker**. ## What You Can Do with Roles & Permissions - Assign one of **five preset roles** to every team member (Owner, Admin, Manager, Analyst, Viewer) - Customise the default role on a per-user basis through the **Permission Picker** - Restrict access at the **page level** (campaigns, audiences, billing, etc.) and the **action level** (send a campaign, delete a contact, export a report) - Let any teammate raise a **"Request access"** notification to the Owner with one click - Enforce the same rules on the **customer-facing API** so external integrations can't bypass them ## How to Access Roles & Permissions ### Step 1: Navigate to Manage Users 1. Log in to your Mailercloud account. 2. Click the **user avatar** in the sidebar, then choose **Account**. 3. Open **Settings → Users**. ![](https://staticfiles.gleap.io/gattachments/j8lhFicByqxEYxKoI86heQGdnFGMib5k7fENBKE48r2yirRZcjfsJTo2NvnTkYUUA55kxuUpJHm.png) ### Step 2: Add a New User 1. Click **Add New User** in the top-right. 2. Enter the teammate's **name**, **email address**, and pick one of the four assignable roles (**Admin**, **Manager**, **Analyst**, or **Viewer**). 3. Click **Send Invite** — they'll receive an email to set their password and join your workspace. ![](https://staticfiles.gleap.io/gattachments/kbqGoFqtCvdrfIkrF3ibUZJmFoOCuhonzCPymnWBiOz2R1EkOZb4zIgDa7eXFhzlXHctCMD90cC.png) ### Step 3: Customise an Existing User 1. From the Users list, click **Edit** on the user's row. 2. **Step 1 (Roles):** Change the role if needed. If 2FA is enforced for your team, the Two-Factor Authentication toggle is visible here. 3. Click **Proceed** to open the **Permission Picker** (Step 2). 4. Expand any module (Campaigns, Audiences, Billing, etc.) and toggle individual **View / Edit / Delete / Send / Publish / Export** rights. 5. Click **Save changes** — the new permissions take effect on the user's next page load. ![](https://staticfiles.gleap.io/gattachments/sRQUWYMTAXkKzH0PDsfg6fHGLfLX0YRDskKrfm19TY9BmECqzgOiHarK9aCrtJEEzKryCWeV8Xx.png) ![](https://staticfiles.gleap.io/gattachments/MrzOXnRXQFtQQZLeKBVbfERHjew9XGUclxxki0hZGcMG4vlYCO5944iT0RevM2EAdhU6fIXaWs1.png) ## The Five Roles at a Glance

Role	Access Level	Customisable?
Owner	Full access — one per workspace	No
Admin	Full operational access, including audit log and billing	No
Manager	Day-to-day operations (campaigns, audiences, automations, templates)	Yes
Analyst	Read-only with full reporting and export rights	Yes
Viewer	Minimal read-only (dashboards, lists, campaigns, audiences)	Yes

### Owner - One per workspace — always has full access. - Cannot be customised and cannot be re-assigned from the Edit User wizard. - The **only role** that receives "Request access" notifications from teammates. ### Admin - Full operational access, including the audit log and full billing management. - Cannot transfer ownership or delete the account. - Cannot be customised through the Permission Picker. ### Manager - Runs day-to-day operations across the workspace — campaigns, audiences, automations, templates, transactional API, and email verifier. - Cannot manage billing, the team, or workspace security settings. - Fully customisable per user. ### Analyst - Read-only access across the platform, with full reporting and export rights on contacts, activity logs, and the audit log. - Cannot create, edit, send, or delete anything. - Fully customisable per user. ### Viewer - Minimal read-only access — dashboards, lists, campaigns, and audiences. - No editing, no exports, no billing visibility. - Fully customisable per user. ## Key Features ### Inline Access Denial When a user tries to open a page they don't have access to, the sidebar and header remain intact — there's no confusing redirect. Instead, the page body displays a clear **"Admin access needed"** card with a **Request access** button. ### Request Access Any teammate can click **Request access** from any denial card. This instantly sends a notification to the workspace Owner showing exactly which page or action the user tried to reach — no tickets, no chasing. The Owner can respond directly inside Mailercloud. ## Frequently Asked Questions #### Can the Owner role be assigned to another user? No. There is only one Owner per workspace, and ownership cannot be transferred through the Edit User wizard. #### Can I restrict an Admin's permissions using the Permission Picker? No. The Admin role cannot be customised through the Permission Picker. If you need granular control, assign the Manager, Analyst, or Viewer role instead. #### When do permission changes take effect? Changes take effect the next time the user loads a page in their browser session. #### Can API integrations bypass role-based restrictions? No. The same permissions are enforced on the customer-facing API, so external integrations respect the same access rules as your team members. #### Can a Viewer export reports? No. The Viewer role has no export access. If a teammate needs export rights, assign the Analyst role or customise their permissions using the Permission Picker. ### Need Help? If you're unsure which role is right for a team member, or need help configuring custom permissions, contact the [Mailercloud support team](https://www.mailercloud.com/contact-us). We'll help you set up the right access structure for your workspace.