Skip to content

Roles and Permissions

Role-based Access Control permissions for your Vercel team members.

Roles and Permissions are available on Pro and Enterprise plans

When you create a Team, Vercel allows you to share the Team's access with other members. Each member must be assigned a role in determining which actions that user can perform on your Team. These roles have specific Role-based access control (RBAC) permissions depending on your team's plan, Pro or Enterprise.

To change the role of existing team members:

  • Navigate to the Team Settings page of the Vercel Team
  • Click the Members tab on the left navigation bar
  • Select the role you want to assign and click the Add Member button
  • Click "Confirm" in the modal to change the team member's role

There are two roles for team members on a Pro Team plan:

Team member roles for your Vercel Pro Team account.

Team owners have admin-level access to the entire Vercel Team. A Team owner can edit and manage all Project settings, from creating and previewing deployments to promoting them to production, as well as editing and managing security, billing, and Git settings. You can also use the "Add New" drop-down menu to perform quick tasks like adding Projects, Domains, or Team Members.

Teams can have more than one owner. Adding additional owners will not remove any existing ownership. To maintain ownership continuity for your Team, you should have at least two people with owner permissions.

Note that only those with the owner role can change other Team members roles.

Drop-down for adding new team owners.

Team owners can also manage Environment Variables in all Environments and change the roles of other members on the Team — including other owners. The only way to remove oneself as an owner is by either leaving or deleting the team.

Those with a member role can create deployments, set up integrations, and manage domains for Projects on a Team. The member role can manage Deploy Hooks, Serverless Function settings, and security settings for Projects. However, they cannot edit any Team settings, including billing information and inviting additional users to the Team.

Create Deployments
Manage Domains
Manage Integrations
Manage Deploy Hooks
Manage Serverless Functions
Manage Security Settings
Manage Billing
Manage Team Members
Manage Team Settings

For Teams on the Enterprise plan, Vercel offers three additional roles:

Team member roles for your Vercel Enterprise team account.

Those with the developer role can create deployments, manage environment variables for preview and development environments, and manage domains for Projects on a Team.

They cannot edit any Team settings, including billing information and inviting additional users to the Team. The developer role can also be promoted to Administrator on a specific project.

Create deployments
Manage Environment Variables in Preview and Development Environments
Create Production Deployments
Promote a deployment to production from the dashboard or via source control integrations
Manage any Team or Project Settings

Team owners can assign users with the developer role as administrators on any Project on a Team. When you are made an administrator, you can manage all Project settings, including the ability to create Production Deployments and manage production Environment Variables.

Create deployments
Manage Environment Variables in Preview and Development Environments
Create Production Deployments
Promote a deployment to production from the dashboard or via source control integrations
Manage Team Settings
Manage Project Settings

Adding a team member as an administrator only applies to the specific Project where the role was assigned. It does not apply to other Projects on the Team.

To assign the administrator role, go to the Project's Settings page and click the administrators tab on the left navigation bar.

The administrators page of a Project.

Next, type the email address of the team member with the developer role that you would like to make an administrator. You can add multiple email addresses by clicking the "Add more" button. When finished, click the "Add" button.

Adding an administrator to a Project.

The billing role allows members to manage billing settings and invoices for a Team. The billing role provides read-only access to all Projects on a Team. Team members assigned this role are unable to edit any Project settings.

Member permissions with a billing role.

The viewer role gives read-only access to a Team and prevents users from editing any Team or Project settings. Team members with the viewer role cannot create deployments.

The following table outlines the permissions for each role.