---
title: "Academy Article"
canonical_url: "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions"
locale: en
meta:
  "og:title": "Academy Article"
---

[Go to home](https://academy.laioutr.com/en)

- [Cockpit](https://academy.laioutr.com/en/bereiche/cockpit)

- [Team, roles and access](https://academy.laioutr.com/en/leitfaeden/team-roles-and-access)

- [Assign roles and permissions](https://academy.laioutr.com/en/artikel/assign-roles-and-permissions)

# Assign roles and permissions

Roles decide what a member can see and do in Cockpit. Besides the built-in roles Owner, Developer, Project Manager and Content Manager, the organisation defines custom roles with selected permissions under Roles and assigns them when inviting.

## Before you start

<dl>

<dt>Plan</dt>
<dd>All plans; scope of custom roles depends on the plan</dd>

<dt>Role</dt>
<dd>Owner or a role with the roles permission</dd>

<dt>Duration</dt>
<dd>6 min</dd></dl>

### Prerequisites

- Organisation in Cockpit
- An overview of who does which tasks

Last reviewed on October 15, 2026

Roles separate duties: people who edit content do not need access to billing or API keys, and people who start deployments do not need to manage members.

### Built-in roles

Laioutr comes with four roles on one ladder: **Owner** can do everything, followed by **Developer**, **Project Manager** and **Content Manager**. Each Cockpit feature declares the lowest role it needs. Creating and deleting environments, for example, is reserved for Project Managers and above.

### Custom roles

Under **Roles**, the organisation defines additional roles with a name and a set of permissions, for example for members, billing or API keys. Members receive roles when they are invited or later from an admin.

Nobody can hand out a role that allows more than their own, and only an Owner grants admin rights. Cockpit hides buttons the role does not allow; areas out of reach appear as a disabled tab with a tooltip.

Roles apply to the whole organisation or specifically to one project or one environment.

## Step by step

1. 1 ### Step 1: Open Roles

   Open the **Roles** tab in the organisation settings. Without the roles permission, the tab is disabled.
2. 2 ### Step 2: Create a role

   Click **Create new role**, enter a **Name** such as Editorial and select at least one permission under **Permissions**.
3. 3 ### Step 3: Save and check

   Save. The role appears in the list, with each permission as a chip.
4. 4 ### Step 4: Assign when inviting

   In the **Members** tab, click **Invite**, enter email addresses and choose one or more roles.
5. 5 ### Step 5: Adjust existing members

   Click a member in the list to open the profile and change the roles there.
6. 6 ### Step 6: Update or remove a role

   In the role's row menu, choose **Update role** to change name and permissions, or **Remove role** to delete it.

## Check the result

In the member list, the person shows the new role as a chip. After the next sign-in, they only see permitted areas; other tabs are disabled and name the missing permission.

## Frequently asked questions

Which roles exist out of the box?

Owner, Developer, Project Manager and Content Manager, in that order from most to fewest rights. Custom roles of the organisation come on top.

Why is the Roles tab disabled?

The current role lacks the roles permission. An Owner can add it.

Can a member grant more rights than they hold?

No. Roles can only be granted with actions the granting person holds. Only an Owner grants admin rights.

Can a role be limited to one project?

Yes. A role can be granted on a single project or a single environment; the member then sees only that.

## Related

- [Give access to a single project or environment](https://academy.laioutr.com/en/artikel/give-access-to-one-project-or-environment)5 min

  A role can be granted on a single project or a single environment instead of the whole organisation. The member then sees and reaches only that project or environment: project list, environment switcher, Studio and deployments.
- [Give the customer service team access](https://academy.laioutr.com/en/artikel/give-your-customer-service-team-access)5 min

  The service team gets a role of its own with exactly the permissions it needs and is invited to the organisation with that role. Billing, API keys and deployments stay out of reach.
- [Manage an organisation in Cockpit](https://academy.laioutr.com/en/artikel/manage-an-organisation-in-cockpit)5 min

  The organisation is the top-level container in Cockpit and holds members, roles, projects, billing and API keys. Its name, projects, members and deletion are managed in the organisation settings.
- [View activity and the audit log](https://academy.laioutr.com/en/artikel/view-activity-and-audit-log)5 min

  Cockpit records who did what and when: each environment's history shows creation, deployments, copies and migrations with person and time. The audit log in the Enterprise package also records every change across the organisation.

## Learn it in a lesson

- [Invite the team, roles and API keys](https://academy.laioutr.com/en/lektionen/go-live-team-roles-and-api-keys)8 min

## [Team, roles and access](https://academy.laioutr.com/en/leitfaeden/team-roles-and-access)

Search this guide

1. [Assign roles and permissions](https://academy.laioutr.com/en/artikel/assign-roles-and-permissions)6 min
2. [Create and manage API keys](https://academy.laioutr.com/en/artikel/create-and-manage-api-keys)6 min
3. [Give access to a single project or environment](https://academy.laioutr.com/en/artikel/give-access-to-one-project-or-environment)5 min
4. [Give the customer service team access](https://academy.laioutr.com/en/artikel/give-your-customer-service-team-access)5 min
5. [View activity and the audit log](https://academy.laioutr.com/en/artikel/view-activity-and-audit-log)5 min

## Structured Data

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@id": "https://academy.laioutr.com/#website",
      "@type": "WebSite",
      "inLanguage": "en",
      "name": "Default",
      "url": "https://academy.laioutr.com/",
      "translationOfWork": {
        "@id": "https://academy.laioutr.com/#website"
      }
    },
    {
      "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#webpage",
      "name": "Academy Article",
      "url": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions",
      "@type": [
        "WebPage",
        "FAQPage"
      ],
      "breadcrumb": {
        "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#breadcrumb"
      },
      "isPartOf": {
        "@id": "https://academy.laioutr.com/#website"
      },
      "mainEntity": [
        {
          "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/1"
        },
        {
          "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/2"
        },
        {
          "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/3"
        },
        {
          "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/4"
        }
      ],
      "potentialAction": [
        {
          "@type": "ReadAction",
          "target": [
            "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions"
          ]
        }
      ]
    },
    {
      "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#breadcrumb",
      "@type": "BreadcrumbList",
      "itemListElement": [
        {
          "@type": "ListItem",
          "name": "Home",
          "item": "https://academy.laioutr.com/en",
          "position": 1
        },
        {
          "@type": "ListItem",
          "name": "Cockpit",
          "item": "https://academy.laioutr.com/en/bereiche/cockpit",
          "position": 2
        },
        {
          "@type": "ListItem",
          "name": "Team, roles and access",
          "item": "https://academy.laioutr.com/en/leitfaeden/team-roles-and-access",
          "position": 3
        },
        {
          "@type": "ListItem",
          "name": "Assign roles and permissions",
          "item": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions",
          "position": 4
        }
      ]
    },
    {
      "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/1",
      "@type": "Question",
      "inLanguage": "en",
      "name": "Which roles exist out of the box?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "<p>Owner, Developer, Project Manager and Content Manager, in that order from most to fewest rights. Custom roles of the organisation come on top.</p>"
      }
    },
    {
      "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/2",
      "@type": "Question",
      "inLanguage": "en",
      "name": "Why is the Roles tab disabled?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "<p>The current role lacks the roles permission. An Owner can add it.</p>"
      }
    },
    {
      "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/3",
      "@type": "Question",
      "inLanguage": "en",
      "name": "Can a member grant more rights than they hold?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "<p>No. Roles can only be granted with actions the granting person holds. Only an Owner grants admin rights.</p>"
      }
    },
    {
      "@id": "https://academy.laioutr.com/en/artikel/assign-roles-and-permissions#/schema/question/4",
      "@type": "Question",
      "inLanguage": "en",
      "name": "Can a role be limited to one project?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "<p>Yes. A role can be granted on a single project or a single environment; the member then sees only that.</p>"
      }
    }
  ]
}
```