Roles and permissions
Who can do what — individuals, members, admins, and owners — and why a control can be missing.
Two things decide what you can do
BriefCatch answers “may this person do this?” by combining two independent facts:
The license says what the account is entitled to
A feature the plan does not include is unavailable to everyone on that account, regardless of role. Enterprise-only capabilities like SCIM are the clearest case.
The role says what you personally may do with it
Inside an organization, administrative capability comes from your role. Holding a role that could manage something does not help if the license never unlocked it, and a license that unlocks something does not help if your role does not carry it.
This is why two people on the same plan can see different screens, and why the same person can see different screens in two organizations.
The people using BriefCatch
Individual
No organization. Owns their own subscription, their own credits, and their own documents, and can create an organization to move onto a team plan.
Member
Belongs to an organization and works under its license. Uses the product; changes nothing about the organization.
Admin
Runs the organization day to day: people, roles, and organization settings. Not the money.
Owner
The broadest role. Everything an admin can do, plus billing and the destructive account decisions. The person who created the organization starts as owner.
An account can belong to more than one organization, with a different role in each. The organization picker in the header sets which one is active, and every permission question is answered against that one.
What each role can do
| Member | Admin | Owner | |
|---|---|---|---|
| Upload, review, and export documents | Yes | Yes | Yes |
| Run RealityCheck (spends shared credits) | Yes | Yes | Yes |
| Connect a personal drive | Yes | Yes | Yes |
| View the member list | — | Yes | Yes |
| Invite, remove, and re-role members | — | Yes | Yes |
| Change organization settings | — | Yes | Yes |
| Manage organization-wide integrations | — | Yes | Yes |
| Grant or revoke the owner role | — | — | Yes |
| Change the plan, seats, or payment method | — | — | Yes |
| View invoices and buy credit top-ups | — | — | Yes |
Billing is the line between admin and owner. An admin who opens a billing screen is redirected: ask an owner rather than retrying.
Individuals sit outside this table. With no organization, there is no role to hold, so they get the product capabilities their license grants plus self-service billing over their own subscription.
Membership states
A person in an organization is in one of three states:
- Pending — created by an invitation. They have no password and cannot sign in until they accept the invitation from the invited address.
- Active — a normal account.
- Deactivated — disabled. They keep their membership record but cannot sign in.
Removing a member can cut their access to organization resources. Confirm any document handoff before removing someone.
Enterprise: custom roles
Enterprise organizations can go beyond member/admin/owner and define their own roles against the same permission vocabulary, and can provision people automatically through SCIM so joiners and leavers follow the directory. See Teams and organizations.
When a control is missing
Work down this list before reporting a bug:
- Is the right organization active? The picker in the header decides which membership applies.
- Does your role carry it? Compare against the table above.
- Does the plan include it? Enterprise-only features are absent on Individual and Pro.
- Is the license active? A lapsed license makes the whole account read-only — see Plans and licenses.
If all four check out and the control is still missing, that is worth reporting. See Troubleshooting.