Team & access

Roles explained: Owner, Admin, Member and Viewer

Every person in your organization has one role. Here is exactly what each role can do in M365Assessments.

Who can do this
Everyone
Plan
All plans
Time
2-minute read

The four roles

  • Owner: full control, including billing, single sign-on and managing other owners.
  • Admin: manage teammates (except owners) and customers, send onboarding and consent links, manage modules, schedules, branding and billing, and run assessments.
  • Member: run assessments and view reports.
  • Viewer: view customers, assessments and reports, and download files. Can't change anything.

What each role can do

Role capabilities
ActionViewerMemberAdminOwner
View dashboard, customers, modules, schedules and team
Open reports and download Word / PowerPoint files
Suggest features, vote and comment on the Feedback board
Run an assessment on demand
Add customers, choose modules, send onboarding and consent links
Disable modules, offboard customers
Set up, edit or remove schedules
Delete assessments
Edit report branding and logo
Change plan, open billing and invoices
Invite teammates, change roles and remove members (not owners)
Invite, promote or remove owners; transfer ownership
Turn single sign-on & roles on or off

Rules that always apply

  • An organization always keeps at least one Owner: nobody can remove or demote the last Owner, and the last Owner can’t leave.
  • You can lower your own role or leave, but you can’t raise your own role.
  • People whose role comes from Microsoft Entra (single sign-on & roles) show Managed in Entra ID and can't be changed or removed in the portal: change their assignment in Entra instead.
  • In a suspended organization everyone is read-only.

Good to know

Your own role is shown under SettingsOrganizationYour role, and everyone's role is listed on the Team page.

Last updated

Can't find what you need?

Our team is happy to help. Missing an article? Suggest it on the Feedback board in the app and vote for the ones you want.