# Users & Access

The **Users & Access** section lets you manage team permissions across your Zotlo organization.\
You can invite teammates, assign roles, restrict access to specific projects, and update or remove users at any time.

Zotlo supports **organization-level** and **project-level** access control, allowing you to create a secure and collaborative workspace.

### **Inviting Users**

You can invite teammates in two ways:

#### **1. Organization-level invitation**

The user joins your entire organization and can be assigned roles across all projects.

#### **2. Project-level invitation**

The user is added only to selected projects and roles apply only to those projects.

After sending an invitation, you can update the user's role or remove access directly from the Users & Access page.

### **Roles & Permissions**

Zotlo includes five predefined roles.\
Each role defines which actions a user can perform across projects and account settings.

#### **Role Overview**

| Role              | Description                                                                                                                                   |
| ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| **Account Owner** | The owner of the Zotlo organization. Has full permissions. This role exists only for the account creator and cannot be changed.               |
| **Account Admin** | Has the same full permissions as the Account Owner. Can manage all projects, users, billing, and account-level settings.                      |
| **Project Admin** | Manages the projects they are assigned to. Can edit settings, checkout flows, products, subscriptions, and configurations for those projects. |
| **Operator**      | Performs operational tasks (e.g., refunding payments, managing subscriptions) for assigned projects, but cannot edit project configuration.   |
| **Reporter**      | Read-only access to financial reports and analytics for assigned projects. Cannot make changes.                                               |

### **Permission Matrix**

Below is a simplified permission model to help you understand what each role can do.

<table><thead><tr><th width="218.5625"></th><th width="103.8046875" data-type="checkbox">Account Owner</th><th width="103.74609375" data-type="checkbox">Account Admin</th><th width="100.95703125" data-type="checkbox">Project Admin</th><th width="106.484375" data-type="checkbox">Operator</th><th width="107.7109375" data-type="checkbox">Reporter</th></tr></thead><tbody><tr><td>Create/Delete Project</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Manage Project</td><td>true</td><td>true</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Manage Checkout</td><td>true</td><td>true</td><td>true</td><td>true</td><td>false</td></tr><tr><td>Manage Sales Flows</td><td>true</td><td>true</td><td>true</td><td>true</td><td>false</td></tr><tr><td>Manage Package Prices</td><td>true</td><td>true</td><td>true</td><td>false</td><td>false</td></tr><tr><td>View Traffic &#x26; Conversion Statistics</td><td>true</td><td>true</td><td>true</td><td>false</td><td>true</td></tr><tr><td>View Revenue Reports</td><td>true</td><td>true</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Subscription Management</td><td>true</td><td>true</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Refund</td><td>true</td><td>true</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Financials/Billing</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Account Management</td><td>true</td><td>true</td><td>false</td><td>false</td><td>false</td></tr></tbody></table>