Roles & Permissions
EOS Hub uses three layers of roles: the system role decides who operates the platform, the organization role controls what a person can do in an organization, and the team role controls what a person can do within a specific team.
System Roles
System roles are assigned at the account level and apply across the entire installation.
| Role | Shown as | Description |
|---|---|---|
SUPERADMIN | Platform admin | The platform operator: manages organizations, accounts, and platform-wide AI settings |
USER | User | Standard account; access determined by organization and team memberships |
Platform Operator (SUPERADMIN)
A SUPERADMIN can:
- Open Platform administration (
/platform) - Create organizations together with their first Owner
- Suspend and resume organizations
- See all accounts on the platform
- Configure AI providers and prompts for the whole platform
WARNING
The platform operator has no automatic access to customer data. A SUPERADMIN sees an organization's teams only if they are also a member of that organization -- and then only with the access their organization role gives them.
Organization Roles
Organization roles are assigned per organization. A person can have different roles in different organizations.
| Role | Description |
|---|---|
OWNER | Manages the organization; team Admin in every team (Owner where they are a team Owner); can grant and revoke Owner and Admin |
ADMIN | Manages the organization (settings, people, teams); team Admin in every team (Owner where they are a team Owner) |
MEMBER | Sees and works only in the teams they belong to, with their team role |
IMPLEMENTER | External EOS Implementer or coach; team Admin in every team, but does not rate meetings and cannot manage the organization |
| Action | OWNER | ADMIN | IMPLEMENTER | MEMBER |
|---|---|---|---|---|
| See all teams of the organization | Yes | Yes | Yes | No (own teams only) |
| Change organization settings (name, time zone, language) | Yes | Yes | No | No |
| Add and remove people, assign Member or Implementer | Yes | Yes | No | No |
| Grant or revoke Owner and Admin | Yes | No | No | No |
| Create, rename, and delete teams; manage team members | Yes | Yes | No | No |
| Rate meetings of teams they belong to | Yes | Yes | No | Yes |
INFO
An organization must always keep at least one Owner. See User Management for more on each organization role.
Team Roles
Team roles are assigned per team. A person can have different roles in different teams.
| Role | Description |
|---|---|
OWNER | Full control of the team's data |
ADMIN | Can manage the team's measurables, Rocks, meetings, V/TO, and Accountability Chart, and delete items |
MEMBER | Can contribute to meetings and create and update to-dos, issues, and their own data |
VIEWER | Read-only access to team data |
Organization Owners, Admins, and Implementers act at least as team Admin in every team of their organization, whether or not they are listed as team members.
Permissions Matrix
| Action | OWNER | ADMIN | MEMBER | VIEWER |
|---|---|---|---|---|
| View dashboard and all team data | Yes | Yes | Yes | Yes |
| Enter Scorecard values | Yes | Yes | Yes | No |
| Add, edit, and remove measurables | Yes | Yes | No | No |
| Create and edit Rocks | Yes | Yes | No | No |
| Update status and milestones of own Rock | Yes | Yes | Yes | No |
| Create and edit Issues, To-Dos, headlines, and document links | Yes | Yes | Yes | No |
| Edit the team's V/TO traction (1-Year Plan, archive) | Yes | Yes | No | No |
| Create, start, and end meetings | Yes | Yes | No | No |
| Participate in and rate meetings | Yes | Yes | Yes | No |
| Save People Analyzer evaluations (as yourself) | Yes | Yes | Yes | No |
| Edit Accountability Chart (one per team) | Yes | Yes | No | No |
| Delete anything | Yes | Yes | No | No |
Implementers have the ADMIN column's rights, except that they do not rate meetings. See User Management for the full list.
Company vision
The Vision side of the V/TO -- Core Values, Core Focus, 10-Year Target, Marketing Strategy, and 3-Year Picture -- is one per organization and shared by all teams, so its rights do not follow the team matrix. It is edited by organization Owners and Admins, Implementers, and the Admins and Owners of a leadership team. Every other member of the organization can read it. Nobody can edit it while the organization is suspended.
Company Accountability Chart
When the organization keeps one Accountability Chart for the whole company, it is edited by the same people as the company vision, not by the team matrix.
OWNER
The team Owner has full control over the team's data.
ADMIN
Admins manage the team's EOS tools: measurables, Rocks, meetings, the V/TO, and the Accountability Chart. They can delete items.
MEMBER
Members are active participants. They can create and update To-Dos and Issues, update their own Rocks, participate in and rate meetings, and enter Scorecard values.
VIEWER
Viewers have read-only access. They can see the dashboard, Scorecard, Rocks, and other data, but cannot modify anything. This role is useful for stakeholders who need visibility without participation.
INFO
Creating, renaming, and deleting teams and managing team members is an organization task -- it is done by organization Owners and Admins in Organization settings, not by the team roles.
How Roles Interact
Consider a person who is:
USERsystem roleMEMBERof the organizationOWNERof the Sales teamMEMBERof the Leadership team
This person can fully manage the Sales team's data (measurables, Rocks, meetings, V/TO) but can only participate as a regular contributor in the Leadership team, and does not see the organization's other teams.
If the same person were an organization ADMIN, they would see every team of the organization and act at least as team Admin in each of them.
Managing Roles
Changing Organization Roles
Organization roles are managed by organization Owners and Admins:
- Navigate to Organization settings > Members.
- Find the person.
- Open the row menu (⋯) and choose Change role.
Only Owners can grant or revoke the Owner and Admin roles.
Changing Team Roles
Team roles are managed by organization Owners and Admins:
- Navigate to Organization settings > Teams.
- Find the team's card.
- Find the member in the member list.
- Change their role using the role selector.
TIP
When onboarding a new leadership team member, add them as a MEMBER first. Promote to ADMIN or OWNER after they are comfortable with the platform.
Next Steps
- Organizations & Teams -- How organizations and teams are structured
- Organization Settings & Platform -- Managing the organization and the platform
- User Management -- Adding people and organization roles