Skip to main content
Orbit controls access per project. A person can own one project, be a Member of another, and have no access to a third. Every project member has one base tier. They can also hold any number of custom roles that add granular permissions.

Base tiers

The person who creates a project becomes its Owner. This is unrelated to account registration order; Orbit has no global first-user administrator role.

Owner guarantees

The Owner role always has every permission and cannot be edited. The Owner cannot be removed from the project or changed to another tier. To make someone else the Owner, use Transfer ownership.

Editable system roles

Admin, Member, and Viewer are system roles. From Settings → Workspace → Roles & management, you can add permissions to them, but you cannot delete the roles or remove the abilities guaranteed by their base tiers. Clearing a permission in the editor does not override a tier guarantee. Use a lower base tier with custom roles when you need tightly scoped access.

Custom roles add access

Create a custom role when the base tiers are too broad. Give it a name and slug, then enable the permissions it should grant. Permissions cover projects, members, roles, settings, integrations, automation, labels, issue types, issues, and comments. Custom roles are additive:
  • A member keeps every ability from their base tier.
  • Permissions from all assigned custom roles are combined.
  • A custom role can grant an ability, but it cannot deny one already supplied by the base tier or another role.
  • A person can hold several custom roles at once.
Custom roles are scoped to one project. Creating or assigning a role in one project does not affect any other project.

Own and any comment permissions

Comment moderation is split into separate abilities:
  • Create comments controls whether someone can add a comment.
  • Edit own comments and Delete own comments apply only to comments the person wrote.
  • Edit any comment and Delete any comment allow moderation of other people’s comments.
Members receive the own-comment abilities by default. Owners and Admins can normally edit or delete any comment. A custom role can grant these controls separately, which is useful for a moderator who should manage discussions without receiving broader project administration access.

Manage roles

Open Settings → Workspace → Roles & management, then choose a project. Depending on your permissions, you can:
  • inspect the project roles and search the permission catalog;
  • create and rename custom roles;
  • enable one permission or an entire section at once;
  • edit the permissions of Admin, Member, Viewer, and custom roles;
  • delete custom roles.
Role-management controls appear only when your own access allows the action. The general Edit settings permission also grants management access across the roles area. See Manage members and roles to assign tiers and custom roles to people.
Last modified on August 1, 2026