WEBVTT

1
00:00:00.200 --> 00:00:04.307
Workspace roles help your organization decide who can do what.

2
00:00:04.487 --> 00:00:09.306
Begin with the work a teammate needs to perform, then choose the appropriate access.

3
00:00:09.486 --> 00:00:13.102
This lesson explains the role model and the membership review.

4
00:00:13.282 --> 00:00:17.635
It does not require creating a new account or changing a live permission.

5
00:00:18.095 --> 00:00:22.669
Open Team to review the current workspace members and their assigned roles.

6
00:00:22.849 --> 00:00:25.889
Confirm that you are looking at the intended workspace.

7
00:00:26.069 --> 00:00:29.613
Check the member name and email as well as the role label.

8
00:00:29.793 --> 00:00:34.636
Similar names or an old email address can lead to the wrong access decision.

9
00:00:35.096 --> 00:00:38.767
The role model includes Owner, Admin, Member, and Viewer.

10
00:00:38.947 --> 00:00:41.265
Owner is the highest workspace role.

11
00:00:41.445 --> 00:00:44.530
Admin covers administration responsibilities.

12
00:00:44.710 --> 00:00:49.010
Member supports normal work, while Viewer is read-oriented where supported.

13
00:00:49.190 --> 00:00:55.599
Check the permissions for the specific action you need,
because a label alone does not describe every control.

14
00:00:56.059 --> 00:01:02.628
For example, an operations coordinator may need to
review submissions and follow an approval process.

15
00:01:02.808 --> 00:01:08.034
Check whether ordinary member access is sufficient before assigning a broader role.

16
00:01:08.214 --> 00:01:17.247
Treat billing, integration configuration, and workspace administration
as separate responsibilities that deserve an explicit access decision.

17
00:01:17.707 --> 00:01:19.938
The Team view shows current membership.

18
00:01:20.118 --> 00:01:24.118
Use only the membership-management path available in your account.

19
00:01:24.298 --> 00:01:31.103
If self-service invitations are unavailable, ask the
workspace owner or support for the supported process.

20
00:01:31.283 --> 00:01:37.224
Do not assume a visible member list also provides an invitation or role-change control.

21
00:01:37.684 --> 00:01:42.365
After an approved access change, confirm the correct account and workspace.

22
00:01:42.545 --> 00:01:44.957
Have the teammate check the intended task.

23
00:01:45.137 --> 00:01:50.415
Also confirm that actions outside the assigned responsibility remain restricted.

24
00:01:50.595 --> 00:01:55.736
Use individual accounts so the organization can identify who performed the work.

25
00:01:56.196 --> 00:02:01.656
Review membership when a person changes responsibilities or leaves the organization.

26
00:02:01.836 --> 00:02:05.082
Temporary access should have a clear owner and an end point.

27
00:02:05.262 --> 00:02:15.154
Ask an authorized administrator to remove unneeded access through the supported
process, and confirm the result rather than assuming a request completed it.

28
00:02:15.614 --> 00:02:23.966
Keep a short access checklist: the correct person and workspace,
the responsibility that requires access, and the role that supports it.

29
00:02:24.146 --> 00:02:28.169
Record who approves a change and verify the result afterward.

30
00:02:28.349 --> 00:02:32.414
Use the written guide when reviewing access with your workspace owner.