Team roles
Match access to responsibility: ownership and billing, day-to-day administration, trusted membership, or explicitly restricted permissions.
Open the guideHow it works
Owners manage the workspace including billing. Administrators manage resources and members without billing ownership. Members have broad resource access but cannot manage membership or read the audit log.
Use a restricted role for specific resources and actions. Member and admin are not read-only roles; review the permission model before delegating infrastructure access.
What you can do
Ownership
Keep billing and ownership responsibilities explicit.
Administration
Delegate day-to-day resource and membership management.
Restricted roles
Use explicit permissions instead of broad access.
Explore more
Ship it your way.
Self-hosted and free, or managed on Openship Cloud — the same workflow either way.