Skip to main content
InviziPoll
Sign inStart free trial

Roles and permissions

What Owners, Admins and Members can do in an InviziPoll workspace, what custom roles actually change today, and how roles differ from folder access.

  • Workspace admins
  • 3 min read
  • Updated Oct 14, 2026
Note

Workspace roles and folder access are separate. Your role decides who can run the workspace; invites, billing, settings, SSO; shared folders decide who can work on which polls.

InviziPoll gives every person in a workspace one of three base roles: Owner, Admin or Member. The role controls administration; access to specific polls comes from the folders someone has been given, whatever their role.

The Roles tab under Admin, Team. Base roles Owner, Admin and Member are shown as selectable tabs with Owner selected, described as full administrative access across billing, security and workspace controls. A Custom roles section reads No custom roles yet beside a Create Custom Role button, and the selected role lists the one user holding it.
Admin, Team, Roles - what each base role can do, and where custom roles are created.

#Base roles

  • Owner: Everything: billing and Subscription, Workspace Settings (name, slug, branding, deleting the workspace), changing anyone's role, SSO, verified domains, SCIM, Slack connection and the team 2FA policy. Only an owner can make someone else an owner. A workspace can have more than one owner, and the last owner can't be removed.
  • Admin: Invites people (up to your seat limit) and removes Members. Admins can't remove other Admins or Owners, and can't change roles unless their custom role allows it (see below).
  • Member: Works on polls in the folders they've been given. Can't invite people or change workspace settings.

#Custom roles: what they change today

On the Roles tab, + Create Custom Role opens Enforcement Policies with eight toggles in three groups: Workspace Management (Billing, Workspace Settings, Danger Zone), User Management (Invite Users, Remove Users, Change Roles) and Security & Access (Manage SSO, Manage 2FA Policies).

Warning

Today only one of those toggles has any effect: Change Roles, and only for someone whose base role is Admin. Turning it on lets that Admin change other people's roles and manage custom roles. Every other toggle is stored but not enforced; what a person can do still comes from their base role. An Admin can invite and remove Members even if their custom role says otherwise, and a Member can't invite anyone even if their custom role says they can.

Use custom roles to hand role management to a trusted Admin. For everything else, choose the base role that matches what the person should be able to do.

#Where to manage roles

Open Admin in the left sidebar (the shield icon). It opens on the Users tab. The tabs along the top are:

  • Users: members, invitations and seat usage. Owners, and Admins allowed to change roles, change a member's role from the row actions.
  • Contact lists: saved recipient lists for sending polls.
  • Roles: the three base roles, your custom roles and who holds each.
  • SSO & Provisioning: identity provider, verified domains, sign-in policy and SCIM. Owner only.
  • Webhooks: SIEM audit log destinations.
  • 2FA: the team two-factor policy.

You can reach the same place from Settings → Team.

#Business features

SSO, verified domains and SIEM webhooks are on Business and Enterprise. SCIM is on Business and Enterprise too, and on paid Pro with the SCIM add-on. During a trial, the owner can try all of them by switching on the Business features preview from Subscription. Configuration is owner-only, whatever the plan.

See also Billing, trial, and tier limits. Each page covers the adjacent settings and workflow steps.