Understanding Courier’s roles and permissions and how to assign roles to members of your tenant.
Availability: Roles and Permissions are available for Enterprise customers. Contact Courier Support or your account team for access.
Assigning Roles to Teammates in Your Tenant
Workspace administrators can invite teammates and assign/change teammate roles from a pre-defined list of roles.ACCESSING TEAM SETTINGSGo to Settings > Team to invite, assign and manage team member roles.

Team Roles
Roles and Role-Based Feature Access
Below you’ll find the complete list of pre-defined roles and their feature access.NOTEAccess to the data logs has three pre-defined levels
- Level 1: View a list of messages with a high-level summary.
- Level 2: View list of messages with high-level summary and message status details (received, sent, delivered). Level 2 allows users to open the request received tab, which includes the profile data and their respective PII as well as any data passed via the request which may include PHI.
- Full Access: List of messages in logs along with high-level summary, message status details (received, sent, delivered). Rendered message visible in Logs.
| Role | Description | Feature Access |
|---|---|---|
| Admin | Best for company administrators and business owners. Has permissions for everything. | * Full read and write access * Account management * Edit Access to API keys |
| Manager | Best for a team manager who doesn’t need to update users or billing. | * Full read and write access * View Access to API keys |
| Developer | Best for engineers and developers who will primarily work with Courier’s API and Templates & Automations Designer. | * Read-only access in the Live environment * Full read and write access in the Test environment * Level 2 Logs Access in Production * Full Access to Logs in Test |
| Designer | Has the ability to update templates and brands but can’t update integrations or settings. | * Full read and write access for the Templates & Automations Designer, Brands and Metrics. * Read-only access for integrations and Lists * Level 1 Logs Access |
| Support Specialist | Best for customer support specialists regularly use the platform but don’t need to update templates or brands. | * Read-only access to Designer, Brands, Integrations. * Full read and write access in Lists and Metrics * Full Logs access |
| Analyst | Best for users who need full read-only access to the platform (except logs). | * Read-only access to the Designer, Brands, Integrations and Lists * Full access to Metrics * Level 2 Logs Access |
Custom Roles
Custom roles are available to Enterprise customers. To configure custom roles for your team, please contact Courier Support or your Courier account team. The available scopes that can be assigned to custom roles are listed below.
Custom Roles
Platform Scopes
Analyticsanalytics:View
asset:ListItemsasset:ReadItemasset:WriteItem
shared-content:ListItemsshared-content:ReadItemshared-content:WriteItem
message:ListItemsmessage:ReadEventDetailsmessage:ReadItemmessage:RequeueItemmessage:WriteItemautomationLogs:CancelRunautomationLogs:InvokeRunautomationLogs:ListItemsautomationLogs:ReadItemautomationLogs:WriteItem
template:ListItemstemplate:ReadItemtemplate:WriteItem
automationTemplate:InvokeautomationTemplate:ListItemsautomationTemplate:ReadItemautomationTemplate:WriteItem
brand:ListItemsbrand:ReadItembrand:WriteItem
preferenceTemplate:ListItemspreferenceTemplate:ReadItempreferenceTemplate:WriteItem
recipient:ListItemsrecipient:ReadItemrecipient:WriteItem
list:ListItemslist:ReadItemlist:WriteItem
tenant:ListItemstenant:ReadItemtenant:WriteItem
metrics:GetMetrics
integration:ListItemsintegration:ReadItemintegration:WriteItem
Account Management Scopes
API Keysapikey:ListItemsapikey:ReadItemapikey:RotateKeyapikey:WriteItem
auditTrail:ListItems
billing:UpdatePaymentMethodbilling:UpdatePlanbilling:ViewBilling
guardRails:ReadSettingguardRails:WriteSetting
security:WriteSettings
user:InviteUseruser:ListItemsuser:ReadItemuser:WriteItem
tracking:WriteSettings
webhook:ListItemswebhook:ReadItemwebhook:WriteItem