Skip to content

Roles and permissions

The eight built-in roles, what each is for, and a full table of what each role can see and do.

Every member of an organisation has one role. The role decides which menu items they see and what they can change. You choose a role when you invite someone and can change it at any time in Members.

The roles

RoleBest for
OwnerFull control of the organisation, including billing and other Owners. Whoever creates the organisation is its first Owner, and there is always at least one.
AdminRunning the organisation day to day: settings, members, roles, the audit log and WhatsApp. Everything except billing.
SupervisorLeading agents: works the inbox, sees team workload, the audit log and WhatsApp connection health.
AgentHandling conversations: replies, assigns, notes and resolves, and edits the contacts they talk to.
Marketing ManagerTemplates, campaigns, automation and AI agents, WhatsApp links and the business profile customers see.
DeveloperIntegrations, API keys and event webhooks; sees the audit log, WhatsApp settings and the webhook log. Can read conversations but not send messages.
Billing AdministratorThe plan, payments, WhatsApp credits and invoices. Sees who is on the team.
Read OnlySees most areas but changes nothing.

Note: IconEngage has these eight built-in roles. You can't create custom roles or change what a role includes from the app.

What each role can do

In the table, Marketing means Marketing Manager and Billing means Billing Administrator. "Yes" means the role has that capability; "–" means it doesn't.

Some features also depend on your plan. For example, catalogs and orders need the Pro or Enterprise plan whatever your role.

Inbox and conversations

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See conversations, messages and delivery statusYesYesYesYesYesYes–Yes
See the Inbox (views, assignment, notes, tags, SLA timers)YesYesYesYes–––Yes
Send WhatsApp messages and retry failed sendsYesYesYesYesYes–––
Claim, release and transfer conversationsYesYesYesYes––––
Write internal notesYesYesYesYes––––
Tag conversations and manage conversation tagsYesYesYesYes––––
Resolve conversationsYesYesYesYes––––
Use the AI copilot in the inboxYesYesYesYes––––
Set your own status (Available, Busy, Away, Offline)YesYesYesYes––––
Create, edit and delete saved repliesYesYes––––––
See teams, queues, business hours and team workloadYesYesYesYes–––Yes
Manage teams, queues, business hours, SLA targets and capacityYesYes––––––

Contacts

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See contacts, tags, fields, segments and consentYesYesYesYesYesYes–Yes
Edit contacts, tags, fields, segments and consentYesYesYesYesYes–––
Add contacts and run importsYesYes––Yes–––
Export contactsYesYes––Yes–––
Delete contactsYesYes––––––

Campaigns

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See broadcasts, audiences, results and opt-outsYesYesYesYesYesYes–Yes
Create audiences and compose broadcastsYesYes––Yes–––
Edit drafts and audiences, and record manual opt-outsYesYes––Yes–––
Send, test-send, pause and resume broadcastsYesYes––Yes–––
Delete audiences and broadcasts that haven't been sentYesYes––––––

WhatsApp

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See numbers and accounts, quality and connection healthYesYesYes–YesYes––
Connect a WhatsApp Business AccountYesYes––––––
Sync, replace the access token and disconnectYesYes––––––
Edit the business profileYesYes––Yes–––
See the raw webhook log and replay eventsYesYes–––Yes––
See message templatesYesYesYesYesYesYes–Yes
Create template draftsYesYes––Yes–––
Edit drafts and sync templates from MetaYesYes––Yes–––
Submit templates to Meta for reviewYesYes––Yes–––
Delete templatesYesYes––––––
See WhatsApp links, leads and attributionYesYesYesYesYesYes–Yes
Create, edit and delete WhatsApp linksYesYes––Yes–––
Mark leads and conversions, and enter ad spendYesYesYesYesYes–––
See catalogs and ordersYesYesYesYesYesYes–Yes
Accept carts, update and cancel orders, send payment linksYesYesYesYesYes–––
Sync a catalog from Meta ahead of scheduleYesYes––––––

Automation and AI agents

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See flows, runs, inbound webhooks and credentialsYesYesYesYesYesYes–Yes
Create flows, inbound webhooks and credentialsYesYes––Yes–––
Edit flow drafts and run testsYesYes––Yes–––
Publish and unpublish flows, start and cancel runsYesYes––Yes–––
Delete flows, inbound webhooks and credentialsYesYes––––––
See AI agents, knowledge and intentsYesYesYesYesYesYes–Yes
Edit AI agents, knowledge and intents, and test draftsYesYesYes–Yes–––
Publish and unpublish AI agentsYesYes––Yes–––

Analytics

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See the DashboardYesYes––––––
See the API usage reportYesYes–––Yes––

Other reports follow the area they report on. For example, the Messaging report needs access to conversations, the Campaigns report needs access to campaigns, and the Agents report needs access to teams and routing.

Organisation, team and billing

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
Change the organisation's name, day boundary and setup checklistYesYes––––––
See members, invitations and rolesYesYesYesYesYesYesYesYes
Invite people and revoke invitationsYesYes––––––
Change a member's roleYesYes––––––
Remove membersYesYes––––––
See the audit logYesYesYes––Yes––
See the plan, usage, WhatsApp credits and invoicesYes–––––Yes–
Change the plan and payment method, add credits, cancelYes–––––Yes–

Integrations and developers

CapabilityOwnerAdminSupervisorAgentMarketingDeveloperBillingRead Only
See integrations, their health and delivery logYesYes––YesYes–Yes
Create, edit, test and delete integrations, and set up Contact lookupYesYes–––Yes––
Set and rotate integration credentialsYesYes–––Yes––
See API keysYesYes–––Yes––
Create, change and revoke API keysYesYes–––Yes––
Manage event webhooks and replay deliveriesYesYes–––Yes––

Things to know

  • Admins can't see billing. Only Owners and Billing Administrators see the Billing pages.
  • Developers can read but not send. They can see conversations for integration work but can't send messages to customers.
  • Some actions ask you to confirm it's you. Making someone an Owner (or changing an Owner's role) asks for your password or authenticator code first.
  • If something is missing from your menu, your role doesn't include it. Ask an Owner or Admin to change your role.

Still need help?

Write to us at [email protected] and tell us what you were trying to do. Already a customer? Sign in to IconEngage — the same articles are under Help in the app.