Skip to main content
User permissions in incident.io are controlled through base roles and custom roles. Each user has one base role that determines their core permissions, plus optional custom roles can grant additional permissions. Configure roles at Settings → Users → Roles tab. Assign roles to individual users at Settings → Users → Users tab. For information on how roles interact with billing, see seat types.

​
Base roles

Every user has a base role that determines their default permissions. There are three base roles:
  • Standard — default role for all users. Can view and declare incidents. Responders with this role can participate in incident response.
  • Admin — all Standard permissions, plus the ability to manage organization settings and billing.
  • Owner — full access to all incident.io features and settings.
Viewers can only have the Standard role. To assign a user the Admin or Owner role, they must have a Responder or On-call seat.

​
Default permissions by role

PermissionStandardAdminOwner
Use incident.io via Slack and dashboard (view and create incidents)✅✅✅
Create and edit workflows and announcement rules✅✅✅
View organization settings (except billing)✅✅✅
Edit organization settings❌✅✅
View and edit billing settings❌✅✅
View all private incidents (including those they are not part of)❌❌✅
Slack workspace admins already have access to all private Slack channels, so they can access all private incidents regardless of their incident.io role.
You can customize base role permissions at Settings → Users → Roles tab. Click the edit icon on any base role to modify its permissions — for example, restricting billing access so only Owners can manage billing settings. Base roles list showing Owner, Admin, and Standard roles
Editing the Admin role permissions

​
Custom roles

Custom roles grant specific permissions to individual users beyond their base role. They only add permissions — they never remove them. A user receives the union of all permissions from their base role plus any assigned custom roles. Example custom roles:
  • Engineer — manage API keys and webhooks
  • Finance — manage billing settings and on-call pay reports
  • Security — view all private incidents
To create a custom role, go to Settings → Users → Roles tab and click Add new. Define the role name, description, and specific permissions to grant.
Creating a custom Engineer role

​
Managing user permissions

View and edit user permissions at Settings → Users → Users tab. Each row shows the user’s current seat type, base role, and custom roles. To modify a user’s permissions, click the edit icon next to their name. You can change their base role or add custom roles. Users can hold multiple custom roles simultaneously.
Editing a user's seat type, base role, and custom roles