Team roles and permissions guide

Manage your agency staff, media buyers, analysts, and content copywriters with Role-Based Access Control (RBAC).

Role hierarchy and capabilities

MyContentLab defines four organizational roles to enforce clear internal boundaries:

Capability	Owner	Manager	Member	Viewer
Manage subscription and billing	Yes	No	No	No
Configure white-label and domains	Yes	No	No	No
Invite and remove team members	Yes	Yes	No	No
Create new client workspaces	Yes	Yes	No	No
Connect or disconnect data sources	Yes	Yes	Yes (Assigned)	No
Run AI Content Lab batches	Yes	Yes	Yes (Assigned)	No
View client metrics and dashboards	Yes (All)	Yes (All)	Yes (Assigned)	Yes (Assigned)

Role definitions

Owner

• The primary account holder and legal organization owner.
• Full access to billing, Stripe Customer Portal, white-label settings, and data exports.
• Can transfer organization ownership to another team member.

Manager

• Operations directors and lead account managers.
• Can invite team members, assign client workspaces, and create new client accounts.
• Cannot alter global billing plans or delete the organization.

Member

• Account managers, media buyers, copywriters, and video editors.
• Full read/write access to their assigned client workspaces (running Content Lab runs, uploading video analyses, generating reports).
• Cannot see unassigned client accounts.

Viewer

• Interns, junior analysts, or auditors requiring read-only visibility into assigned client metrics.

Next steps

Team administration

• Inviting team members — Step-by-step onboarding guide.
• Two-factor authentication (MFA) — Enforcing security standards.