# Workspaces and roles

An organization holds workspaces, a workspace holds the work, and your role decides what you can do.

- **Organization**: Your company or team: its people, its workspaces, and settings such as Keel, single sign-on and the audit log. You can belong to several.
- **Workspace**: Where the work lives: workflows, runs, connections, folders and API tokens. Nothing in one workspace can see another’s.

Templates are the exception: a template you save is offered to everyone in the organization.

## Roles in a workspace

Each role can do everything the one above it can, and more:

- **Viewer**: Sees workflows, runs and connections. Changes nothing.
- **Operator**: Also runs workflows, decides held runs, and cancels and deletes runs.
- **Editor**: Also creates, changes, publishes and deletes workflows, and adds, changes and deletes connections.
- **Admin**: Also manages the workspace, its members and its API tokens.

## Roles in an organization

- **Owner**: Full control, including transferring or deleting the organization.
- **Admin**: Manages members, workspaces and organization settings.
- **Member**: Works in the workspaces they belong to.

You hold one role in the organization and one in each workspace you’re in. You can do what either allows. An [API token](https://docs.gorunner.io/build/api-tokens) can do only what was ticked when it was made, never more.

## Switch between them

Press the names at the top of the sidebar, or `⌘` `E`. See [Switch organization or workspace](https://docs.gorunner.io/build/find-your-way-around#switch).

## Add people

Owners and admins invite people from **Settings › Organization › People**, and choose their roles. [Invite people and set roles](https://docs.gorunner.io/build/invite-people) shows how.

## Rename, leave, delete or hand over

Each is in **Settings**. Names are under **Name** on each **General** page.

- **Leave workspace**: **Settings › Workspace › General**. You stay in the organization, and an admin can add you back. Not your only workspace.
- **Delete workspace…**: Same page, for its admins and the organization’s owners and admins. It deletes its workflows, runs and connections. People keep their place in the organization. An organization keeps at least one workspace.
- **Transfer ownership…**: **Settings › Organization › General**, for the owner.
- **Leave organization**: Same page, for anyone but the owner.
- **Delete organization**: Same page, for the owner, after typing its name.
- **Delete account…**: **Settings › Account**. It deletes your account and any organization where you’re the only person, and you leave the others. If you own an organization with other people in it, transfer or delete it first. You confirm with your email, then a code, your password or an emailed link.

## For developers

Over the API, a workflow, run or connection of another workspace answers `404`, as if it didn’t exist. Each organization’s secrets are sealed with its own key, and every change people make is in the [audit log](https://docs.gorunner.io/build/audit-log).

## Related

- [Invite people and set roles](https://docs.gorunner.io/build/invite-people): Members and People · 4 min
- [Set up single sign-on](https://docs.gorunner.io/build/single-sign-on): OIDC or SAML for your organization · 5 min
- [Find your way around](https://docs.gorunner.io/build/find-your-way-around): The sidebar, search and the switcher · 3 min

Source: https://docs.gorunner.io/build/workspaces-and-roles