Roles & Permissions

Geog uses role-based access control (RBAC) to manage what members can do within an organization. Each member is assigned a role that determines their permissions.

Organization Roles

Every organization member has one of three roles:

Role	Description
Owner	Full control over the organization, including billing, deletion, and all settings
Admin	Manage members, tokens, and organization settings — but cannot manage billing or delete the organization
Member	Create and manage API tokens, view usage and billing information

Choosing a Role

Owner — Assign to the person responsible for billing and overall organization management. Every organization must have at least one owner.
Admin — Assign to team leads or technical administrators who need to manage members and settings.
Member — Assign to developers and analysts who need API access and usage visibility.

Permission Reference

Member Management

Permission	Owner	Admin	Member
Invite members	✅	✅	—
Remove members	✅	✅	—
Change member roles	✅	✅	—
View members	✅	✅	✅

Token Management

Permission	Owner	Admin	Member
Create API tokens	✅	✅	✅
Revoke API tokens	✅	✅	✅
View tokens	✅	✅	✅
Manage token settings (rate limits, scopes)	✅	✅	✅

Usage & Analytics

Permission	Owner	Admin	Member
View usage dashboard	✅	✅	✅
Export usage data	✅	✅	✅
View analytics	✅	✅	✅

Billing

Permission	Owner	Admin	Member
Manage billing & payment methods	✅	—	—
Manage subscription	✅	—	—
View billing information	✅	✅	✅

Organization Settings

Permission	Owner	Admin	Member
Update organization name & settings	✅	✅	—
Configure organization-level settings	✅	✅	—
Delete organization	✅	—	—

Resources

Permission	Owner	Admin	Member
View resources	✅	✅	✅
Create, update, and delete resources	✅	✅	—

Common Questions

"Why can't I change billing settings?"

Only organization owners can manage billing, payment methods, and subscriptions. If you need billing access, ask an owner to either:

Change your role to owner, or
Make the billing changes on your behalf

"How do I invite a new team member?"

You need the owner or admin role to invite members. Go to your organization's Members page in the console, click Invite Member, and enter their email address. They'll receive an invitation email with a link to join.

"Can I be a member of multiple organizations?"

Yes. You can belong to multiple organizations and have a different role in each. Use the organization switcher in the console sidebar to switch between them.

"How do I change someone's role?"

Owners and admins can change roles from the Members page. Click the role dropdown next to a member's name and select the new role. Role changes take effect immediately.

"Can an admin promote themselves to owner?"

No. Only existing owners can assign the owner role. This prevents privilege escalation.

Changing Roles

Navigate to your organization in the console
Go to Members in the sidebar
Find the member whose role you want to change
Click the role dropdown next to their name
Select the new role

Role changes take effect immediately across all sessions.

Next Steps

Getting Started with the Console — Set up your account and organization
Organization Management — Managing members and settings
Token Management — Creating and managing API tokens
Billing Setup — Setting up billing and viewing usage