Users & Roles

CMS access is controlled by roles. There are five CMS roles, plus none.

Role	Summary
owner	Above Admin. Cannot be demoted, disabled or deleted by anyone else. Can transfer ownership.
admin	Everything except acting on the Owner. Manages users, webhooks and the audit log.
editor	Manages content and content-type/form structure.
author	Creates entries; edits and deletes only entries they created.
viewer	Read-only.
none	A website/application account with no CMS access. The default for new sign-ups.

The first account created on a deployment becomes the Owner.

Manage users

Open Users in the admin dashboard (Admin and above). You can change roles, disable accounts and view or revoke a user’s sessions. A change is rejected if it would leave the deployment with no Owner and no Admin.

Disabling an Admin and transferring ownership both require re-entering your password.

Website registration never grants CMS privileges. See Authentication.