# Teams and User Roles ### Overview You can invite team members to collaborate on your ComplyCube account and assign them specific roles to control what they can see and do. [User roles](#user-roles) help protect sensitive information and ensure that each member only has access to the features they need. Team members can be added and managed through the [team members page](https://portal.complycube.com/settings/team). From there, you can invite new users, assign roles, and update permissions at any time. {% hint style="info" %} Further controls can be applied to our [Advanced Case Management](https://app.gitbook.com/s/KyFKMqftsmT6qln9zo5y/due-diligence-tools/advanced-case-management) service using [User Groups](https://app.gitbook.com/s/KyFKMqftsmT6qln9zo5y/due-diligence-tools/advanced-case-management#user-groups). {% endhint %} ### User roles ComplyCube provides five predefined user roles to assign when adding team members to your account. Each role carries different levels of access and restrictions. {% hint style="info" %} The **Account Owner** role is automatically assigned to the person who created the account. Please contact [support](https://support.complycube.com/) to reassign the owner. {% endhint %}

Role	Description
Administrator	Full administrative privileges similar to the Account Owner, including managing API keys, account settings, and inviting new users.
Developer	Designed for technical users. Developers can access and manage API keys, but cannot manage team members.
Analyst	Suitable for compliance or risk teams. Analysts can view reports, update checks, but cannot view or refresh API keys.
Support Specialist	Intended for support teams. They can view and process client checks, but cannot change workflow and check configurations or validate results (approve/reject).
View Only	This provides read-only access to all clients, workflows, sessions, and checks. View-only users cannot access account settings, automation rules, or API keys.

### Permissions table Owner(**O**), Admin (**A**), Developer (**D**), Analyst (**AN**), Support Specialist (**SS**), View Only (**VO**).

	O	A	D	AN	SS	VO
Clients - Create, Update, Export	✔️	✔️	✔️	✔️	✔️	-
Clients - Bulk Imports	✔️	✔️	✔️	✔️	-	-
Clients - Delete	✔️	✔️	✔️	✔️	-	-
Clients - Read	✔️	✔️	✔️	✔️	✔️	✔️
Checks - Create, Update, Import, Export	✔️	✔️	✔️	✔️	✔️	-
Checks - Validate	✔️	✔️	✔️	✔️	-	-
Checks - Batch Processing	✔️	✔️	✔️	✔️	-	-
Checks - Read	✔️	✔️	✔️	✔️	✔️	✔️
Workflows and Templates - Create, Update, Import, Export	✔️	✔️	✔️	-	-	-
Workflows and Templates - Read	✔️	✔️	✔️	✔️	✔️	✔️
Workflow Sessions - Create, Update, Import, Export	✔️	✔️	✔️	✔️	✔️	-
Workflow Sessions - Validate	✔️	✔️	✔️	✔️	-	-
Workflow Sessions - Read	✔️	✔️	✔️	✔️	✔️	✔️
Advanced Case Management - Create, Update	✔️	✔️	✔️	✔️	✔️	-
Advanced Case Management - Read	✔️	✔️	✔️	✔️	✔️	✔️
Advanced Case Management - Delete	✔️	✔️	-	-	-	-
Access Restriction Lists - Create, Read, Update, Delete	✔️	✔️	✔️	✔️	-	-
Banned Faces - Create, Read, Update, Delete	✔️	✔️	✔️	✔️	-	-
AML Risk - Update	✔️	✔️	✔️	✔️	-	-
AML Risk - Read	✔️	✔️	✔️	✔️	✔️	✔️
Analytics & Insights - Read	✔️	✔️	✔️	✔️	✔️	✔️
User Activity Log - Read	✔️	✔️	-	-	-	-
Automation - Read, Update	✔️	✔️	✔️	✔️	-	-
Developers - Create, Update, Read	✔️	✔️	✔️	-	-	-
User Groups - Create, Read, Update, Delete	✔️	✔️	-	-	-	-
Brand Customization - Update	✔️	✔️	-	-	-	-
Team Member - Invite, Read, Update, Delete	✔️	✔️	-	-	-	-
Single Sign On - Read, Update	✔️	✔️	-	-	-	-
Custom Lists - Create, Read, Update, Delete	✔️	✔️	-	-	-	-
Billing - Invoices, Payments	✔️	✔️	-	-	-	-