These run the workspace itself. Give them out carefully.
Permission | Lets someone |
Admin (manage workspace) | Everything in the workspace, including every permission. Only for people you trust fully. |
Reset activity | Reset everyone's activity for the period, and use the Activity settings |
View audit logs | Read the log of who changed what |
Create API keys | Make and remove API keys for your games (the settings area is called "manage API keys") |
Manage features | Turn workspace features on and off |
Manage mail | Mail settings, shared inboxes and the lowest rank |
Workspace customisation | Change the workspace's name, colours and logo |
Export views | Download a staff view or the Directory as a spreadsheet |
What each opens in Settings
Workspace customisation: General and Appearance & branding.
Manage features: Features and Sessions settings.
Reset activity: Activity.
Manage mail (or Manage features): Mail.
Create API keys: Public API.
View audit logs: Audit logs.
Admin: Permissions, Discord and integrations, Custom domain, Roblox and ranking, Plan and billing, and everything else.
Someone with none of these cannot open Settings at all.
Hand-out advice
Keep Admin to the owner and a few trusted leaders. Anyone with Admin can give themselves anything.
Create API keys lets someone read and write workspace data from a game server. Treat a key like a password.
View audit logs exposes every change made in the workspace, including by other admins.
Related articles
Settings map: where everything is and who can open it
Roles and permissions: the basics
Permission reference (3 of 4): moderation, alliances, docs, policies and applications