Team & Roles

The three roles

Access to the admin dashboard is managed with three fixed roles, not a customizable permission set. Everyone on the account has exactly one of them, in this order of authority:

• Owner — full authority over the account, including billing and team management. Assigned automatically to whoever creates the account at signup; the Owner seat is never invited.
• Admin — broad authority just under Owner. Can manage claims, registrations, warranty rules, intelligence settings, and portal configuration. Cannot manage billing or team membership.
• Agent — works claims day to day: reviews and resolves claims, views orders and registrations. Cannot change settings or rules.

Managing the team

Team membership lives at the top-level Team item in the sidebar — not nested under Settings. From there:

• Invite Member sends an email invitation for the Admin or Agent role. The Owner role can't be invited; it's fixed to whoever created the account.
• Invitations stay open until accepted — there's no expiry — and can be revoked at any time before that from the Pending Invitations list.
• An existing Admin or Agent's role can be changed from the Members table, or the member can be removed entirely, which revokes their access immediately.

Other permission distinctions

Creating and managing API keys for the public API and MCP server requires the Admin role or above — Agents can't create, rotate, or revoke keys.

See also: Plans & Billing (/docs/plans-and-billing) for how the number of admin and agent seats differs by plan tier.