Roles and permissions
Unit Oncall has two independent layers of roles:
- Organization roles control who can manage the Organization itself — its members, settings, billing, and deletion.
- Team roles control who can manage a specific Team — its schedule, its members, and its integrations.
A person has exactly one Organization role and a (possibly different) role in each Team they belong to. The layers are separate: being an Organization admin does not by itself make you a team_admin of every Team, and a plain Organization member can still be the team_admin of a Team they run.
Organization roles
| Role | Intended for | Summary |
|---|---|---|
owner | The person who owns the Organization. | Full control, including deletion and ownership transfer. |
admin | Day-to-day administrators. | Manage members and settings. |
billing | Finance / procurement. | Manage billing only. |
member | Everyone else. | Use the product; no Organization-level administration. |
What each Organization role can do
| Action | owner | admin | billing | member |
|---|---|---|---|---|
| Manage members (invite, remove, change roles) | ✓ | ✓ | — | — |
| Manage Organization settings | ✓ | ✓ | — | — |
| Manage billing and subscription | ✓ | — | ✓ | — |
| View audit logs (Business plan and above) | ✓ | — | — | — |
| Delete the Organization / transfer ownership | ✓ | — | — | — |
| Belong to Teams and respond to incidents | ✓ | ✓ | — | ✓ |
The owner, admin, and member roles can be added to Teams and take part in on-call work. What they can do inside a Team is then governed by their Team role, not their Organization role. The billing role is intentionally finance-only and cannot be added to Teams — its purpose is to give finance or procurement staff access to billing without giving them on-call responsibilities.
Team roles
| Role | What it can do |
|---|---|
team_admin | Manage the Team: edit the schedule, manage Team members, and configure the Team's webhook and rules. |
team_member | Take part in the Team's schedule and respond to alerts. |
See Team configuration for how Teams and their members are defined.
Assigning roles
- The Organization role is chosen when a member is invited and can be changed later by an owner or admin.
- The Team role is chosen when a person is added to a Team.
Only owners and admins can manage Organization members and change Organization roles. Only the owner can delete the Organization or transfer ownership to someone else.
Related
- Authentication — how members sign in before any role applies.
- Audit logs — role changes and member management are recorded.
- Team configuration — Team-level membership and roles.
- Organization settings — Organization-wide governance options.