> For the complete documentation index, see [llms.txt](https://docs.complycube.com/documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.complycube.com/documentation/access-management/teams-and-user-roles.md). # Teams and User Roles Manage team access, roles, and permissions for your ComplyCube KYC and identity verification operations. ### Overview You can invite team members to collaborate on your ComplyCube account and assign them specific roles to control what they can see and do. [Standard roles](#standard-roles) help protect sensitive information and ensure that each member only has access to the features they need. Team members can be added and managed through the [Team members page](https://portal.complycube.com/settings/team). From there, you can invite users, assign roles, and manage access. {% hint style="info" %} Further controls can be applied to our [Advanced Case Management](/documentation/product-guides/due-diligence-tools/advanced-case-management.md) service using [User Groups](/documentation/product-guides/due-diligence-tools/advanced-case-management.md#user-groups). {% endhint %} ### Standard roles ComplyCube provides five standard roles for your team members. Each role has different access and restrictions. To review a role's access, open the **Roles** tab and select **View permissions**. If no standard role fits, create a [custom role](#custom-roles) with the required permissions. {% hint style="info" %} The **Account Owner** role is automatically assigned to the person who created the account. Please contact [support](https://support.complycube.com/) to reassign the owner. {% endhint %}

Role	Description
Administrator	Full administrative privileges similar to the Account Owner, including managing API keys, account settings, and inviting new users.
Developer	Designed for technical users. Developers can access and manage API keys, but cannot manage team members.
Analyst	Suitable for compliance or risk teams. Analysts can view reports and update checks, but cannot view or refresh API keys.
Support Specialist	Intended for support teams. They can view and process client checks, but cannot change workflow and check configurations or validate results (approve/reject).
View Only	This role provides read-only access to all clients, workflows, sessions, and checks. View Only users cannot access account settings, automation rules, or API keys.

### Custom roles Custom roles let you define the access available to individual team members. You can configure permissions separately for Sandbox and Live environments. {% hint style="info" %} Custom roles are available on selected plans. Contact your account manager or [support](https://support.complycube.com/) to enable custom roles for your account. {% endhint %} The **Account Owner** and **Administrators** can create, edit, and assign custom roles from the [Team members page](https://portal.complycube.com/settings/team). #### Managing custom roles When creating a custom role, give it a unique name and select the required permissions. You can start from a standard role or duplicate an existing role, then adjust its permissions as needed. Permissions can be granted in Sandbox, Live, or both. Some account-level settings apply across both environments. Some permissions depend on other permissions. Required permissions are selected automatically and remain enabled while needed. Custom roles can include access to clients, checks, workflows, cases, automations, reports, tools, audit history, developer settings, and account settings. {% hint style="warning" %} Custom roles cannot access plan or billing pages. API access is controlled by API keys and is not affected by user roles. {% endhint %} #### Assigning and updating custom roles Select a custom role when inviting a team member or editing their access. Changes to a custom role apply to all members assigned to it. You can view, edit, duplicate, or remove custom roles from the [Team members page](https://portal.complycube.com/settings/team). Before removing a role, assign another role to any members who use it. If custom roles are removed from your plan, existing roles and access remain unchanged. You cannot create, edit, remove, or assign custom roles until the feature is re-enabled. ### Permissions table Owner (**O**), Admin (**A**), Developer (**D**), Analyst (**AN**), Support Specialist (**SS**), View Only (**VO**). This table covers standard roles. You choose the permissions for each custom role.

	O	A	D	AN	SS	VO
Clients - Create, Update, Export	✔️	✔️	✔️	✔️	✔️	-
Clients - Bulk Imports	✔️	✔️	✔️	✔️	-	-
Clients - Delete	✔️	✔️	✔️	✔️	-	-
Clients - Read	✔️	✔️	✔️	✔️	✔️	✔️
Checks - Create, Update, Import, Export	✔️	✔️	✔️	✔️	✔️	-
Checks - Validate	✔️	✔️	✔️	✔️	-	-
Checks - Batch Processing	✔️	✔️	✔️	✔️	-	-
Checks - Read	✔️	✔️	✔️	✔️	✔️	✔️
Workflows and Templates - Create, Update, Import, Export	✔️	✔️	✔️	-	-	-
Workflows and Templates - Read	✔️	✔️	✔️	✔️	✔️	✔️
Workflow Sessions - Create, Update, Import, Export	✔️	✔️	✔️	✔️	✔️	-
Workflow Sessions - Validate	✔️	✔️	✔️	✔️	-	-
Workflow Sessions - Read	✔️	✔️	✔️	✔️	✔️	✔️
Advanced Case Management - Create, Update	✔️	✔️	✔️	✔️	✔️	-
Advanced Case Management - Read	✔️	✔️	✔️	✔️	✔️	✔️
Advanced Case Management - Delete	✔️	✔️	-	-	-	-
Access Restriction Lists - Create, Read, Update, Delete	✔️	✔️	✔️	✔️	-	-
Banned Faces - Create, Read, Update, Delete	✔️	✔️	✔️	✔️	-	-
Lifecycle Triggers - Read	✔️	✔️	✔️	✔️	✔️	✔️
Lifecycle Triggers - Create, Update, Delete	✔️	✔️	✔️	✔️	-	-
Country AML Risk - Update	✔️	✔️	✔️	✔️	-	-
Country AML Risk - Read	✔️	✔️	✔️	✔️	✔️	✔️
Reports - Create, Read	✔️	✔️	✔️	✔️	✔️	✔️
Analytics & Insights - Read	✔️	✔️	✔️	✔️	✔️	✔️
User Activity Log - Read	✔️	✔️	-	-	-	-
Automation - Read, Update	✔️	✔️	✔️	✔️	-	-
Developers - Create, Update, Read	✔️	✔️	✔️	-	-	-
User Groups - Create, Read, Update, Delete	✔️	✔️	-	-	-	-
Domains - Read, Update	✔️	✔️	✔️	-	-	-
Brand Customization - Update	✔️	✔️	-	-	-	-
Team Member - Invite, Read, Update, Delete	✔️	✔️	-	-	-	-
Single Sign-On - Read, Update	✔️	✔️	-	-	-	-
Custom Lists - Create, Read, Update, Delete	✔️	✔️	-	-	-	-
Billing - Invoices, Payments	✔️	✔️	-	-	-	-

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.complycube.com/documentation/access-management/teams-and-user-roles.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.