Types of Roles
There are 4 types of roles: General roles, Built-in roles, Organization roles and Resource-based roles.
General roles aren't product-specific and apply only to the account scope. Learn more about general account roles.
The following table lists the general roles:
| Product | Role | Description |
|---|---|---|
General | Administrator | Full access to invite and revoke access for new users, see billing history and make changes, and change project settings. |
General | Billing Manager | Access to only the required project details for handling billing requests - logs and usage and billing history and settings. |
General | Developer | Access to only the required project details for developing with Twilio - API credentials and phone numbers and development tools and logs and usage. |
General | Owner | Full access to invite and revoke access for new users, see billing history and make changes, change project settings, and close a Twilio account. |
Built-in roles represent known access patterns for a Twilio product and are offered out-of-the-box as part of the Twilio platform.
Built-in roles can be assigned at organization, account, and subaccount scopes.
- Organization scope roles can access all of the accounts and subaccounts of the organization.
- Account scope roles can access all the subaccounts of the account.
- Subaccount scope roles can access only that subaccount.
The following table lists all the built-in roles:
| Product | Role | Description |
|---|---|---|
Studio | Studio Admin | Full access to create, read, update and delete Flows and view Execution logs. This role provides users access to only Studio pages on the Console. |
Studio | Studio Viewer | Ability to view any Flow, export Flow definitions, and see Execution logs. This role provides users access to only Studio pages on the Console. |
Messaging | Content Template Builder Admin | Provides admin permissions for Content Template Builder. Users can view, create, update, or delete Content Templates for messaging. |
Messaging | Content Template Builder Viewer | Provides read-only permissions for Content Template Builder. |
Messaging | Facebook Messenger Senders Admin | Provides admin permissions for Facebook Messenger. Users can view, create, update, or delete a Facebook Messenger Sender. |
Messaging | Facebook Messenger Senders Viewer | Provides read-only permissions for Facebook Messenger. Users can view existing Facebook Messenger Senders. |
Messaging | Messaging Insights & Intelligence Admin | Provides admin permissions for messaging insights & intelligence. Users will be able to view and download insights & intelligence as well as manage notifications. |
Messaging | Messaging Insights & Intelligence Viewer | Provides read-only permissions for messaging insights & intelligence. Users will be able to view insights & intelligence. |
Messaging | Messaging Logs Admin | Provides admin permissions for messaging logs. User will be able to view PII from message logs. |
Messaging | Messaging Logs PII Viewer | Provides read-only permissions for messaging logs. User will be able to view PII from message logs. |
Messaging | Messaging Logs Viewer | Provides read-only permissions for messaging logs. User will not be able to view PII from message logs. |
Messaging | Messaging Opt Out OneConsole Admin | Role for admin level access to messaging opt out endpoints onboarded for OneConsole API readiness |
Messaging | Messaging Services Configurator | Provides permissions to view and configure messaging services and regulatory compliance details for messaging. |
Messaging | Messaging Services Viewer | Provides permissions to view messaging services and regulatory compliance details for messaging. This role does not allow users to configure existing messaging services. |
Organization roles include:
| Product | Role | Description |
|---|---|---|
Organization | Organization Admin | Access to the Admin Center to manage the Organization and perform administrative actions like inviting users, removing users, adding existing accounts, creating accounts, modifying user accounts, and changing Organization settings. Organization Admins are not able to delete the organization. |
Billing | Organization Billing Admin | View and manage billing settings, payment methods, usage, and invoices for all Billing Groups and linked accounts across the organization |
Billing | Organization Billing Viewer | View-only access to billing settings, payment methods, usage, and invoices for all Billing Groups and linked accounts across the organization |
Organization | Organization Owner | Access to the Admin Center with full access to invite and revoke access for new users, see billing history and make changes, and change project settings. Organization Owner can delete the organization and change ownership. |
Organization | Organization Standard User | No access to the Admin Center to manage your Organization in any capacity. This role is the default you would assign to most of the users in your Organization. Standard users only have access to the accounts that you allow. |
Learn more about Organization roles.
Resource-based roles enable more granular access, as they provide access to specific resources rather than all of them. We currently support only one resource for such roles at the organization level, which is the Billing Group.
| Product | Role | Description |
|---|---|---|
Billing | Billing Group Admin | View and manage billing settings, payment methods, usage, and invoices for a specific Billing Group and its linked account(s) |
Billing | Billing Group Viewer | View-only access to billing settings, payment methods, usage, and invoices for a specific Billing Group and its linked account(s) |