Roles and permissions

export const AccessWrite = () => <Badge icon="check" color="green" size="sm">Write</Badge>; export const AccessRead = () => <Badge icon="eye" color="blue" size="sm" stroke>Read</Badge>; export const AccessNone = () => <Badge icon="ban" color="gray" size="sm" stroke disabled>—</Badge>;

Novu uses a role-based access control (RBAC) model at the organization level. Each member in the organization is assigned a role that determines the actions they can perform within the Novu dashboard. Every user can belong to more than one organization, each with separate configurations and permissions.

When you invite a team member to your organization, you can assign them a role that determines the actions they can perform within that organization. You can later update their role from the Team section in your organization settings.

<Note> This feature is available to users on the Team and Enterprise pricing plans, and it is supported on both the new dashboard and the legacy dashboard. </Note>

Roles

<Columns cols={4}> <Card title="Owner" icon="crown" description="Full access, including billing." /> <Card title="Admin" icon="shield" description="Operations and org settings. No billing." /> <Card title="Author" icon="pen-line" description="Build workflows and trigger events." /> <Card title="Viewer" icon="eye" description="Read-only dashboard access." /> </Columns>

Permissions matrix

Compare access across roles at a glance.

Permission	Viewer	Author	Admin	Owner
Workflows and delivery
Create and manage workflows	<AccessRead />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Create and manage messages	<AccessRead />	<AccessRead />	<AccessWrite />	<AccessWrite />
Create and manage topics	<AccessRead />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Trigger events	<AccessNone />	<AccessWrite />	<AccessWrite />	<AccessWrite />
View notifications	<AccessRead />	<AccessRead />	<AccessRead />	<AccessRead />
Environment variables	<AccessRead />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Integrations and webhooks
Manage integrations	<AccessRead />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Create and manage webhooks	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
Manage bridges	<AccessNone />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Manage partner integrations	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
Subscribers and agents
Manage subscribers	<AccessRead />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Manage agents	<AccessRead />	<AccessWrite />	<AccessWrite />	<AccessWrite />
Organization and billing
Create and manage environments	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
Manage API keys	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
Manage custom domains	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
Manage organization metadata	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
Manage organization profile	<AccessNone />	<AccessNone />	<AccessWrite />	<AccessWrite />
View and manage team members	<AccessRead />	<AccessRead />	<AccessWrite />	<AccessWrite />
Manage billing	<AccessNone />	<AccessNone />	<AccessNone />	<AccessWrite />