| Owner | Full access. Plus: rename the organization, promote/demote other Owners, transfer ownership. Cannot leave or be demoted if they’re the only Owner. |
| Admin | All organization settings (org settings, traits, segments, webhook actions, CSM assignment + rules, bulk-assign CSM, connection adoption). Can invite, remove, or change roles for Members and other Admins. Cannot change an Owner’s role, remove an Owner, or grant the Owner role. |
| Member | Day-to-day work: accounts, contacts, requests, tasks, meetings, notes, reporting. Read-only on settings. Cannot change CSM assignments, manage members, or modify org settings. |