Every person in an organisation has one of four roles: owner, admin, member or viewer. The role applies to every project in the organisation.
What each role can do
| Action | Owner | Admin | Member | Viewer |
|---|---|---|---|---|
| See projects, deployments, logs, databases and backups | Yes | Yes | Yes | Yes |
| Run read-only queries in the SQL editor | Yes | Yes | Yes | Yes |
| Create projects and upload code | Yes | Yes | Yes | No |
| Deploy, roll back, start, stop, restart and cancel | Yes | Yes | Yes | No |
| Change project settings and domains | Yes | Yes | Yes | No |
| Create databases, turn on external access, import data | Yes | Yes | Yes | No |
| Take backups and restore them | Yes | Yes | Yes | No |
| Delete a project | Yes | Yes | No | No |
| Delete a backup | Yes | Yes | No | No |
| Invite, remove and change the role of members | Yes | Yes | No | No |
| Rename the organisation | Yes | Yes | No | No |
| Open the Subscription page and change the plan | Yes | Yes | No | No |
| Leave the organisation | No | Yes | Yes | Yes |
A viewer who tries to change something sees, for example, "Viewers can't change projects. Ask an owner or admin to change your role." A member who tries to delete a project sees "Only an owner or admin can delete a project. Ask one of them to do it."
API keys and roles
An API key can never do more than the role of the person who created it:
- a viewer's keys can only read;
- a member's keys can do everything a member can, which leaves out deleting projects, databases and backups;
- owners and admins can give a key any permission.
Owners and admins see every key in the organisation; members and viewers see their own. When someone leaves or is removed, their keys stop working. See API keys.
Change someone's role
Owners and admins change roles on Members in the sidebar.
- Find the person in the list.
- Pick the new role from the menu next to their email: Admin, Member or Viewer.
The change applies straight away and HCode confirms "Member role updated." Owners have no role menu: an owner can't be removed or downgraded by anyone.
The owner
In an organisation ordered in the HostAfrica client panel, the owner is the client panel account that pays for it, and the dashboard can't change that. The role menus have no Owner option, and About ownership and access on Members says "This organisation is billed through your HostAfrica client panel, so its owner is the account holder there and cannot be changed here. Contact support to move it to someone else." To hand an organisation to someone else, email [email protected].
Remove someone
On Members, click Remove next to the person, then Remove member to confirm. They lose access to the organisation and its projects at once, and their API keys and integration access for the organisation are revoked. If you invite them again later, those keys stay revoked.