All updates
New feature

Team Roles & Granular Permission Control

Teams now have three roles — Owner, Admin, and Member — with a fully customizable permission matrix. Each team owner can configure exactly what Admins and Members are allowed to do.

Managing a team used to be all-or-nothing. You were either the Owner with full control, or a Member who could do almost everything but manage the team itself. That created a real problem: you couldn't delegate responsibilities without giving away too much access.

Today that changes.

What's new?

Three roles instead of two

Every team now has three distinct roles:

To change a member's role, click the role dropdown next to their name in Team Settings.


Per-team permission matrix

This is the real power. Every team Owner gets a Role Permissions panel in Team Settings — a table where you can toggle exactly what each role is allowed to do.

Permissions are grouped into three categories:

Team Settings

Projects

Billing

Each permission can be toggled independently for Admin and Member roles. Owner always has full access — that column is locked.

After making changes, hit Save Changes at the bottom right. Nothing is saved until you explicitly confirm.


Sensible defaults

When you create a new team or upgrade to this version, the defaults are:

| Permission | Admin | Member |
|---|---|---|
| Rename team | ✓ | — |
| Invite members | ✓ | — |
| Remove members | ✓ | — |
| Manage integrations | ✓ | — |
| Create projects | ✓ | ✓ |
| Delete projects | ✓ | — |
| Restore projects | ✓ | — |
| Move projects | ✓ | — |
| View billing | ✓ | — |
| Manage billing | — | — |

These are just defaults. Every team Owner can adjust them to fit their workflow.


What this enables

A few real scenarios this unlocks:


Integration access control

Previously, any team member could connect or disconnect GitHub and Vercel integrations. That led to situations where someone accidentally disconnected a shared integration.

Now, integration management respects the permission matrix. Only users with the "Manage integrations" permission can connect or disconnect. Everyone else can still use the connected integrations — they just can't change them.


Technical notes