Seats are free on every plan: roles exist for safety, not billing. Invite people by e-mail from the Agency section of the menu.
The roles
| Role | Can |
|---|---|
| Owner | Everything, including the plan and API keys |
| Admin | The team and invitations, brands, connections, API keys |
| Manager | Clients and brands, connections, approvals, launching campaigns, lowering budgets at once |
| Editor | Posts, creatives, content and drafts; ad changes only as requests |
| Client approver | Sees their own client's brands and approves for the client |
| Client viewer | Sees their own client's brands; changes nothing |
Client roles are bound to one client and never see another client's brands, posts or numbers. They sign in to the client portal, not to your workspace.
Approvals and roles
Who has to approve is set per brand (see Posts and the approval chain). The internal step is decided by an owner, admin or manager; the client step by the brand's client approvers (or an agency manager on the client's behalf). Raising an ad budget always needs a manager or above.
Audit log
Every change of state is written to the audit log: who did what, on which brand, and when — from the panel, the API or an AI assistant. Tokens and raw platform responses are never written to it.