Roles & Permissions
HITL.sh uses a 4-tier role model to control access within organizations. Each role has a defined set of capabilities, ensuring team members can only perform actions appropriate to their responsibilities.Role Hierarchy
Roles are hierarchical — higher-tier roles inherit all capabilities of lower tiers.Capabilities by Role
Owner
Owner
The organization creator with full control. There is exactly one owner per organization.
- Everything an admin can do, plus:
- Transfer organization ownership
- Delete the organization
- Manage billing and subscription
- Change the organization plan (Enterprise)
Admin
Admin
Team leads and managers who configure workflows and manage the team.
- Everything a member can do, plus:
- Invite and remove members
- Change member roles (except promoting to owner)
- Create, update, and delete loops
- Configure organization settings
- Manage API keys
- Generate and revoke invite codes
- View audit logs
Member
Member
Active reviewers who participate in loops and respond to requests.
- Everything a viewer can do, plus:
- Respond to requests assigned to their loops
- Submit endorsement review decisions
- Join loops via invite codes
- Access the mobile app with full review capabilities
Viewer
Viewer
Stakeholders who need visibility into review activity without participating.
- View requests and their statuses
- View responses and decisions
- View loop membership and configuration
- Access analytics dashboards (read-only)
- Cannot respond to requests or modify any settings
Role Comparison Table
Assigning Roles
During Invitation
When inviting a member, admins and owners can specify the role:1
Open Organization Settings
Navigate to your organization’s settings page in the dashboard.
2
Go to Members
Select the Members tab to view current members and invite new ones.
3
Invite with Role
Enter the invitee’s email and select the role (viewer, member, or admin). Click Send Invite.
Via Invite Code
Members who join via an invite code are automatically assigned the member role. An admin or owner can change their role after they join.Changing Roles
Admins and owners can change any member’s role from the Members tab:- Find the member in the members list
- Click the role dropdown next to their name
- Select the new role
- The change takes effect immediately
Admins cannot promote members to owner — only the current owner can transfer ownership. Admins also cannot demote other admins; only the owner can do this.
Best Practices
Principle of Least Privilege
Principle of Least Privilege
Assign the minimum role needed for each team member’s responsibilities. Start with viewer or member and promote as needed rather than defaulting to admin access.
Limit Admin Count
Limit Admin Count
Keep the number of admins small — ideally 2-3 per organization. Too many admins increases the risk of accidental configuration changes.
Use Viewers for Stakeholders
Use Viewers for Stakeholders
Product managers, executives, or clients who need to monitor review activity but shouldn’t participate should be assigned the viewer role.
Audit Role Changes
Audit Role Changes
Enterprise organizations should periodically review the members list and ensure roles still match current responsibilities. Audit logs track all role changes for compliance.
Next Steps
Organizations
Learn how to create and manage organizations
Endorsement Review
Set up multi-step endorsement workflows that leverage role-based routing
Loop Members
Manage loop membership via the API
Dashboard
Access the organization settings and members page