Permission Settings, Compare Admin, Editor, Analyst and Viewer Roles
Pick the right role using a side-by-side capability matrix. Each role grants the minimum permissions needed for its job, following the principle of least privilege.
Permission Settings, Compare Admin, Editor, Analyst and Viewer Roles
Capability matrix at a glance
Permissions are grouped into 6 capability domains. Match the role to what the person actually needs to do.
- Projects, create/edit/delete (Admin + Editor only)
- Members + billing (Owner + Admin only)
- Reports + templates, edit (Admin + Editor)
- Analyses, run (Admin + Editor + Analyst)
- Comments + tags (all roles)
- Read dashboards (all roles incl. Client Viewer)
Owner
The single user with billing + workspace-deletion rights. Transfer to another Admin before deleting your own account.
- Manage billing, plan, payment methods, invoices
- Transfer ownership to another Admin
- Delete the entire workspace (irreversible after 30 days)
- All Admin permissions
Admin
Day-to-day workspace management without billing risk. Most agency leads should be Admin, not Owner.
- Invite + remove members, change roles
- Connect/disconnect integrations
- Create + delete projects
- Configure white-label and templates
Editor and Analyst
The working roles. Editor changes shared things; Analyst only reads + runs + comments.
- Editor: edit projects, templates, alerts, scheduled reports
- Editor: run audits, refresh data, manage tracked keywords
- Analyst: run on-demand analyses (no edit to shared)
- Analyst: add comments, tags, mark issues fixed
Client Viewer
Pure read-only access scoped to assigned projects. Best for client stakeholders and execs.
- View dashboards, reports, exports
- Cannot run analyses or modify anything
- Cannot see billing, members, or other projects
- Cannot access integrations or API keys
- 1Baseline
Record 90-day traffic, rankings and audit score.
- 2Pick Wins
Prioritize high-impact, low-effort items first.
- 3Ship
Deploy changes with timeline annotations.
- 4Measure
Compare 14-day before/after windows.
