> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tryhamsa.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles & Permissions

> Understand what each role can do and how owners can customize member access

## Overview

Every member of a project is assigned a role that determines what they can see and do. There are three roles:

| Role      | Description                                                          |
| --------- | -------------------------------------------------------------------- |
| **Owner** | Full control over the project, including team management and billing |
| **Admin** | Can build and manage content; limited project and team management    |
| **User**  | Can work with agents and content; read-only on sensitive resources   |

The person who creates a project is automatically its **Owner**. Ownership cannot be transferred.

***

## Default Permissions by Role

### Owner

The Owner has full access to everything in the project, including:

* Creating, editing, and deleting all resources (agents, tools, knowledge base, phone numbers, voices, etc.)
* Managing team members — inviting, changing roles, removing members, and customizing individual permissions
* Accessing and managing billing
* Deactivating, renaming, and deleting the project
* Monitoring live calls and exporting call data

### Admin

Admins can do most things, but with a few important limitations:

**What Admins can do:**

* Create, edit, and delete agents, tools, knowledge base items, voices, and secrets
* Make and manage outbound calls and batch call campaigns
* View and export call history, monitor live calls
* Manage phone numbers (add and edit, but not delete)
* Invite new members at the **User** role

**What Admins cannot do:**

* Rename or delete the project
* Deactivate or reactivate the project
* Access billing
* Change a member's role or manage member permissions
* Delete phone numbers
* Invite members at the Admin role

### User

Users can actively work within the project but have read-only access to sensitive resources and cannot manage the team.

**What Users can do:**

* Create, edit, and use agents, tools, and knowledge base items
* Upload files to the knowledge base
* View call history and export call data
* View phone numbers (but not add or edit them)
* View voices, secrets, and outbound calls (but not create or edit them)

**What Users cannot do:**

* Delete agents, tools, or knowledge base items
* Add, edit, or delete phone numbers
* Create or modify voices, secrets, or outbound call campaigns
* Invite or manage team members
* Access billing
* Rename, deactivate, or delete the project

***

## Customizing Member Permissions

Beyond the default role permissions, the **Owner** can fine-tune access for any individual member. This allows you to grant extra capabilities to a specific User, or restrict certain actions for an Admin — without changing their role.

### Opening the Permissions Panel

1. Go to **Project Settings → Members**
2. Find the member you want to customize
3. Open their action menu and select **Manage Permissions**

A drawer will open showing all available resources and actions, with toggles indicating what the member currently has access to.

### Granting or Revoking Access

* Toggle any action **on** to grant that permission
* Toggle any action **off** to revoke it
* Permissions marked as **Custom** have been changed from the role's default

<Note>
  Permission changes may take up to 1 minute to apply.
</Note>

### Cascade Behavior

Some permissions depend on others. If you revoke a member's **read** access to a resource, all other actions for that resource (create, edit, delete, etc.) are automatically revoked as well — since they require read access to function.

### Reverting to Role Defaults

If you want to undo your customizations for a member:

* Click **Revert to defaults** next to a specific resource to reset just that section
* Or use the top-level **Revert all to defaults** option to clear all overrides and return the member fully to their role's standard permissions

***

## Permissions Reference

The table below summarizes the key differences between roles across the main areas of the platform.

| Area             | Owner       | Admin                  | User                                          |
| ---------------- | ----------- | ---------------------- | --------------------------------------------- |
| Agents           | Full access | Full access            | Create & edit (no delete)                     |
| Knowledge Base   | Full access | Full access            | Create & edit (no delete)                     |
| Tools            | Full access | Full access            | Create & edit (no delete)                     |
| Phone Numbers    | Full access | Add & edit (no delete) | View only                                     |
| Call History     | Full access | Full access            | View & export (no delete, no live monitoring) |
| Outbound Calls   | Full access | Full access            | View only                                     |
| Voices           | Full access | Full access            | View only                                     |
| Secrets          | Full access | Full access            | View only                                     |
| Members          | Full access | Invite Users only      | View only                                     |
| Billing          | Full access | No access              | No access                                     |
| Project Settings | Full access | View only              | View only                                     |
| Statistics       | Full access | Full access            | Full access                                   |

***

## Related Documentation

<CardGroup cols={2}>
  <Card title="Team Collaboration" href="./team-collaboration">
    Invite teammates and manage your project members
  </Card>

  <Card title="Managing Projects" href="./managing-projects">
    Create, rename, and manage your projects
  </Card>

  <Card title="Projects Overview" href="./overview">
    Learn what projects are and how they work
  </Card>
</CardGroup>