User roles and permissions

Understand workspace roles, how to change a member's role, remove someone from your workspace, and transfer ownership.

Every person in your Doow workspace has a role that determines what they can see and do. Doow has two global roles and three scoped admin roles that can be assigned to specific resources.

Global roles

Global roles apply across the entire workspace.

Role	What they can do
Admin	Full access to all data, integrations, applications, departments, members, settings, and billing. Can invite and remove members, assign roles, and approve role upgrade requests.
Member	Standard access scoped to resources they have been granted. Can view integrations, organisation data, and member information within their access level. Can request a role upgrade but cannot manage other members or change settings.

The person who creates the workspace is automatically assigned the Admin role. Every workspace must have at least one Admin.

Scoped admin roles

Scoped admin roles give elevated permissions over a specific set of resources — not the entire workspace. When assigning a scoped role you must select which resources it applies to.

Role	Scope	What they can do
App Admin	Assigned applications	Full management of assigned apps including their contracts, licenses, expenses, and notifications. Can approve role upgrade requests related to those apps. No access to apps not in their assignment.
Department Admin	Assigned departments	Full management of assigned departments and the members within them. Can approve role upgrade requests for their departments. No access to other departments.
Integrations Admin	Assigned integrations	Full management of assigned integrations. Can approve role upgrade requests related to those integrations. No access to integrations not in their assignment.

Scoped admins do not have access to workspace settings, billing, or resources outside their assigned scope.

Permissions at a glance

Action	Admin	Member	App Admin	Dept Admin	Integrations Admin
View dashboard and applications	Yes	Yes	Assigned only	Yes	Yes
Manage integrations	Yes	No	No	No	Assigned only
Manage applications and contracts	Yes	No	Assigned only	No	No
Manage departments	Yes	No	No	Assigned only	No
Invite and remove members	Yes	No	No	No	No
Assign and change roles	Yes	No	No	No	No
Approve role upgrade requests	Yes	No	Yes (scoped)	Yes (scoped)	Yes (scoped)
Change workspace settings	Yes	No	No	No	No
Manage billing and plans	Yes	No	No	No	No
Transfer ownership	Yes	No	No	No	No
Request a role upgrade	Yes	Yes	Yes	Yes	Yes

Requesting a role upgrade

Any member can request an upgrade to a higher role. Admins and scoped admins (within their scope) can approve or decline the request.

Go to Settings → Team.
Click Request role upgrade.
Select the role you are requesting and add a note explaining why.
An Admin (or relevant scoped admin) will be notified to review the request.

Viewing current members and roles

Go to Settings → Team.
The table lists every member with their name, email, current role, and join date.
Use the search bar to find a specific person.

Changing a member's role

Go to Settings → Team.
Find the member and click their current role badge.
Select the new role from the dropdown. For scoped admin roles, you will also be prompted to select which resources the role applies to.
The change takes effect immediately.

Only Admins can change roles. You cannot change your own role — ask another Admin if you need your role changed.

Removing a member

Go to Settings → Team.
Find the member and click the menu (three dots) on their row.
Select Remove from workspace.
Confirm.

The member loses access immediately. Any Doow AI conversation threads they created are preserved but marked as "Former member." Notes they left on applications remain visible.

What happens to their assigned resources

If the removed member was a scoped admin over any apps, departments, or integrations, those resources revert to unmanaged. Doow posts an alert in the notification feed reminding you to reassign them.

Transferring workspace ownership

An existing Admin goes to Settings → Team.
Find the member who should become the new owner and click the menu.
Select Transfer ownership.
Confirm by typing the workspace name.

Ownership can only be transferred to another Admin. The transfer changes the billing contact, the primary admin on file, and who receives critical workspace notifications.

Managing pending invitations

The Pending tab on the Settings → Team page shows invitations that have been sent but not yet accepted.

Click Resend to send the invitation email again.
Click Revoke to cancel the invitation — the link becomes invalid immediately.

Invitation links expire after 7 days. After that the row shows "Expired" and you need to send a new invitation.