Outcome and audience

For workspace owners and administrators reviewing customer access.

Before you begin

You need an active membership and the authority to view or change workspace membership.

Where to go

Open People & access under Workspace.

Complete the workflow

Keep the selected workspace, provider, period, currency, cost basis, and data-through date visible as you work.

  1. Review active members and pending invitations.
  2. Assign Owner sparingly; use Admin for approved workspace administration.
  3. Use Editor or Viewer for cost workflows that do not require administration.
  4. Use Billing admin for approved customer billing work without granting staff access.
  5. Remove inactive memberships and revoke unused invitations.

Interpret the result

Customer roles never create platform staff authority or expose provider credentials.

Loading, empty, partial, and unavailable states

Loading preserves the current scope. Empty means no records match the authorized scope. Partial or stale data keeps its completed-through boundary visible. Unavailable or permission-denied states explain the missing prerequisite and never substitute zero or another provider.

Provider differences

Customer role checks are consistent across providers, while specific connection actions may require additional source eligibility.

Synthetic example

Illustrative example · synthetic data Example: Northstar Labs keeps two Owners, assigns a finance reviewer Billing admin, and gives service teams Viewer access.

Common mistakes

Do not assign Owner for convenience or assume a hidden control replaces server authorization.