Team Management: Roles, Permissions, and Access Control

Attribution.ai supports multi-user access so your entire marketing team can collaborate on attribution data. This guide covers how to invite team members, the five available roles, the detailed permissions matrix, and how to manage access.

Roles Overview

Attribution.ai provides five roles with distinct permission levels. Each role is designed for a specific type of team member:

Owner

The Owner role is automatically assigned to the person who created the Attribution.ai account and connected the Shopify store. There is exactly one Owner per workspace.

• Full access to all features, settings, and data
• Can manage billing, integrations, team members, and all workspace settings
• Can transfer ownership to another team member (via support)
• Cannot be removed by other team members
• Cannot have their role changed by other team members

Admin

Admins have the broadest access after the Owner. Assign this role to senior team members who need to manage the account.

• Full access to all dashboard data, reports, and attribution models
• Can manage integrations (connect, disconnect, configure ad platforms)
• Can manage billing (change plans, update payment methods, view invoices)
• Can manage team members (invite, remove, change roles for non-Owner members)
• Can export data
• Can manage store settings

Manager

Managers can configure data sources and manage operational aspects but cannot access billing or team settings.

• Full access to all dashboard data, reports, and attribution models
• Can manage integrations (connect, disconnect, configure ad platforms)
• Can manage store settings
• Can export data
• Cannot manage billing
• Cannot manage team members (cannot invite, remove, or change roles)

Analyst

Analysts can view and export data but cannot modify settings or integrations. This role is ideal for marketing team members and data analysts who need to work with attribution data daily.

• Full access to all dashboard data, reports, and attribution models
• Can export data (CSV, PDF reports)
• Cannot manage integrations, billing, stores, or team settings
• Cannot trigger manual syncs or modify configurations

Viewer

Viewers have read-only access. This role is appropriate for stakeholders, executives, or agency partners who need to see performance data but should not modify anything.

• Can view all dashboard data, reports, and attribution models
• Cannot export data
• Cannot modify any settings, integrations, billing, or team configuration
• Cannot trigger syncs or create reports

Permissions Matrix

The following table shows exactly which capabilities each role has:

Capability	Owner	Admin	Manager	Analyst	Viewer
View dashboard and analytics	Yes	Yes	Yes	Yes	Yes
View attribution models	Yes	Yes	Yes	Yes	Yes
Use MCP / AI tools	Yes	Yes	Yes	Yes	Yes
Export data	Yes	Yes	Yes	Yes	No
Trigger manual syncs	Yes	Yes	Yes	No	No
Manage survey configuration	Yes	Yes	Yes	No	No
Manage integrations	Yes	Yes	Yes	No	No
Manage store settings	Yes	Yes	Yes	No	No
Manage billing	Yes	Yes	No	No	No
Manage team members	Yes	Yes	No	No	No
Transfer ownership	Yes	No	No	No	No

Inviting Team Members

How to Send an Invitation

1. Navigate to Settings > Team in your Attribution.ai dashboard.
2. Click Invite Member.
3. Enter the team member's email address.
4. Select the role you want to assign (Admin, Manager, Analyst, or Viewer).
5. Click Send Invitation.

The invitee receives an email with a link to join your workspace. They will need to create an Attribution.ai account (or log in with an existing one) to accept the invitation.

Invitation Details

• Expiration: Invitations expire after 7 days.
• Resending: You can resend an expired or unaccepted invitation from the Settings > Team page. Look for pending invitations and click Resend.
• Multiple invitations: You can invite multiple team members at once by repeating the process.
• Existing users: If the invitee already has an Attribution.ai account (e.g., they belong to another workspace), they can accept the invitation and access both workspaces from the same login.

Who Can Invite?

Only users with the Owner or Admin role can invite new team members. Managers, Analysts, and Viewers cannot send invitations.

Changing a Team Member's Role

1. Go to Settings > Team.
2. Find the team member in the list.
3. Click the role dropdown next to their name.
4. Select the new role.
5. The change takes effect immediately.

Restrictions:

• Only the Owner and Admins can change roles.
• You cannot change the Owner's role (ownership transfer requires contacting support).
• You cannot change your own role. Another Admin or the Owner must make the change.
• Admins can change the role of any non-Owner team member, including other Admins.

Removing Team Members

1. Go to Settings > Team.
2. Click the three-dot menu next to the team member's name.
3. Select Remove from Team.
4. Confirm the removal.

What happens when a member is removed:

• Their access is revoked immediately.
• They can no longer view any workspace data.
• Any reports, saved views, or configurations they created remain intact.
• The removal is logged in the workspace audit trail.
• Their Attribution.ai account is not deleted -- they simply lose access to your workspace.

Restrictions:

• Only the Owner and Admins can remove team members.
• The Owner cannot be removed.
• You cannot remove yourself. Another Admin or the Owner must remove you if needed.

Ownership Transfer

If the store owner needs to transfer primary ownership of the Attribution.ai workspace to another team member:

1. Contact support through the Help section in your dashboard.
2. Provide the email address of the current Owner and the intended new Owner.
3. The new Owner must already be a team member in the workspace (invite them first if they are not).
4. Both the current and new Owner may need to verify their identity via email confirmation.
5. Once ownership is transferred, the previous Owner is assigned the Admin role.

Ownership transfer cannot be performed self-service to prevent unauthorized access changes.

Best Practices

Principle of Least Privilege

Assign the most restrictive role that still allows each team member to do their job:

• Executives and stakeholders: Viewer (they need to see reports, not change settings)
• Marketing team members: Analyst (they need to view and export data)
• Marketing managers: Manager (they may need to manage integrations and syncs)
• Account administrators: Admin (they need full control except ownership)
• Agency partners: Viewer or Analyst depending on whether they need to export data

Limit Admin Accounts

Keep the number of Admin users to a minimum. Two or three Admins is sufficient for most teams. More Admins increases the risk of accidental configuration changes.

Audit Access Regularly

Review your team list at least quarterly:

• Remove team members who no longer need access (former employees, departed agency partners, consultants whose engagements have ended).
• Downgrade roles when team members' responsibilities change.
• Verify that no one has more access than they need.

Use Individual Accounts

Do not share login credentials. Each team member should have their own account for:

• Proper audit trail (knowing who made which changes)
• Granular access control (different roles for different people)
• Security (if one credential is compromised, only that user's access is affected)

Audit Trail

Attribution.ai logs team management actions in the workspace audit trail. Logged events include:

• Team member invited (who invited whom, with what role)
• Team member removed (who removed whom)
• Role changed (who changed whose role, from what to what)
• Invitation accepted (when a new member joined)

The audit trail is accessible to Owners and Admins under Settings > Team > Activity Log.

Frequently Asked Questions

Can a team member belong to multiple workspaces? Yes. A single Attribution.ai account can be a member of multiple workspaces (e.g., an agency managing multiple client stores). Each workspace has independent roles and permissions.

What happens if the Owner leaves the company? Contact support for an ownership transfer. We can reassign ownership to another Admin after verification.

Can I restrict a team member to viewing only specific channels or date ranges? Not currently. All roles provide access to all data within the workspace. Fine-grained data-level permissions are on our roadmap.

Is there a limit to how many team members I can invite? There is no hard limit on team size for any plan. All plans support unlimited team members.

Do team members count toward my order limit? No. Team members do not affect your plan's order limit. Only Shopify orders processed through Attribution.ai count.