Roles & permissions

LingoSeal has two RBAC layers: workspace-level roles (owner / admin / billing / member) and project-level roles (owner / admin / translator). Workspace owners and admins automatically have project-owner access across every project in the workspace.

Workspace roles

• Owner — full control including workspace deletion, billing changes, and member management. Multiple owners allowed.
• Admin — manage members, projects, settings. Cannot delete the workspace or change billing.
• Member — can create projects (becomes the project's owner) and use anything they've been added to. No workspace-level admin rights.
• Billing — read-only on content; sees invoices, payment method, plan info.

Project roles

• Owner — delete the project, manage team, all content permissions.
• Admin — all content permissions, no team / project- deletion rights.
• Translator — edit translation values, complete assigned tasks, view-only on keys and project settings.

Stub page — the full permission matrix lives in src/lib/auth/permissions.ts for now and will move here in the next docs pass.