Team roles and permissions These are the roles and permissions available when setting team permissions or changing a user’s team role. Roles Team owner The user(s) with the highest team permissions. Team owners always have the following permissions, and they cannot be changed: settings.modify members.modify devices.modify apps.unassign member.make_admin member.make_owner Team admin The user(s) with the second-highest team permissions. By default, Team Admins are assigned the following permissions: settings.modify members.modify devices.modify apps.unassign Team Owners can add or remove these permissions, but they cannot add any other permissions. Team member The user(s) with the lowest team permissions. By default, Team Members have no team permissions. Team Owners can choose to add settings.modify to Team Members, but they cannot add any other permissions. Permissions settings.modify Allows a user to edit team details (name, description, assertion value) and team settings (private test mode, cleanup policy). Team owner: Always Team admin: By default, On Team member: By default, Off members.modify Allows a user to add and remove members, and change member permissions. Team owner: Always Team admin: By default, On Team member: Never devices.modify Allows a user to add and remove devices assigned to the team. Team owner: Always Team admin: By default, On Team member: Never member.make_admin Allows a user to make a team member a team admin. Team owner: Always Team admin: Never Team member: Never member.make_owner Allows a user to make a team member the team owner. Team owner: Always Team admin: Never Team member: Never apps.unassign Allows a user to remove an app assigned to the team. Team owner: Always Team admin: Never Team member: Never