# Types of Roles There are 4 types of roles: General roles, Built-in roles, Organization roles and Resource-based roles. ## General roles General roles aren't product-specific and apply only to the account scope. Learn more about [general account roles](https://help.twilio.com/articles/223136227-What-is-the-difference-between-user-roles-Owner-Administrator-Developer-Billing-Manager-and-Support). The following table lists the general roles: *** Product: General Role: Administrator Description: Full access to invite and revoke access for new users, see billing history and make changes, and change project settings. *** Product: General Role: Billing Manager Description: Access to only the required project details for handling billing requests - logs and usage and billing history and settings. *** Product: General Role: Developer Description: Access to only the required project details for developing with Twilio - API credentials and phone numbers and development tools and logs and usage. *** Product: General Role: Owner Description: Full access to invite and revoke access for new users, see billing history and make changes, change project settings, and close a Twilio account. *** ## Built-in roles Built-in roles represent known access patterns for a Twilio product and are offered out-of-the-box as part of the Twilio platform. Built-in roles can be assigned at organization, account, and subaccount scopes. * Organization scope roles can access all of the accounts and subaccounts of the organization. * Account scope roles can access all the subaccounts of the account. * Subaccount scope roles can access only that subaccount. The following table lists all the built-in roles: *** Product: Studio Role: Studio Admin Description: Full access to create, read, update and delete Flows and view Execution logs. This role provides users access to only Studio pages on the Console. *** Product: Studio Role: Studio Viewer Description: Ability to view any Flow, export Flow definitions, and see Execution logs. This role provides users access to only Studio pages on the Console. *** Product: Messaging Role: Content Template Builder Admin Description: Provides admin permissions for Content Template Builder. Users can view, create, update, or delete Content Templates for messaging. *** Product: Messaging Role: Content Template Builder Viewer Description: Provides read-only permissions for Content Template Builder. *** Product: Messaging Role: Facebook Messenger Senders Admin Description: Provides admin permissions for Facebook Messenger. Users can view, create, update, or delete a Facebook Messenger Sender. *** Product: Messaging Role: Facebook Messenger Senders Viewer Description: Provides read-only permissions for Facebook Messenger. Users can view existing Facebook Messenger Senders. *** Product: Messaging Role: Messaging Insights & Intelligence Admin Description: Provides admin permissions for messaging insights & intelligence. Users will be able to view and download insights & intelligence as well as manage notifications. *** Product: Messaging Role: Messaging Insights & Intelligence Viewer Description: Provides read-only permissions for messaging insights & intelligence. Users will be able to view insights & intelligence. *** Product: Messaging Role: Messaging Logs Admin Description: Provides admin permissions for messaging logs. User will be able to view PII from message logs. *** Product: Messaging Role: Messaging Logs PII Viewer Description: Provides read-only permissions for messaging logs. User will be able to view PII from message logs. *** Product: Messaging Role: Messaging Logs Viewer Description: Provides read-only permissions for messaging logs. User will not be able to view PII from message logs. *** Product: Messaging Role: Messaging Opt Out OneConsole Admin Description: Role for admin level access to messaging opt out endpoints onboarded for OneConsole API readiness *** Product: Messaging Role: Messaging Services Configurator Description: Provides permissions to view and configure messaging services and regulatory compliance details for messaging. *** Product: Messaging Role: Messaging Services Viewer Description: Provides permissions to view messaging services and regulatory compliance details for messaging. This role does not allow users to configure existing messaging services. *** Product: Messaging Role: Messaging Settings Admin Description: Provides admin permissions for Messaging Settings. Users can update general settings, create message log archives, and update geo permissions. *** Product: Messaging Role: Messaging Settings Viewer Description: Provides read-only permissions for Messaging Settings. Users can view general settings, message log archives, and geo permissions. *** Product: Messaging Role: RCS Senders Admin Description: Provides admin permissions for RCS Senders. Users can view, create, update, or delete an RCS Sender. *** Product: Messaging Role: RCS Senders Viewer Description: Provides read-only permissions for RCS Senders. Users can view existing RCS Senders. *** Product: Messaging Role: WhatsApp Senders Admin Description: Provides admin permissions for WhatsApp Senders. Users can view, create, update or delete WhatsApp Senders for messaging. *** Product: Messaging Role: WhatsApp Senders Viewer Description: Provides read-only permissions for WhatsApp Senders. *** Product: Phone Numbers Role: Hosted Numbers One Console Description: Full access to create, read, list and delete Hosted Numbers Orders and LOAs. *** Product: Phone Numbers Role: Numbers Configuration Editor Description: Provides access to configure pre-purchased numbers for using Voice & Messaging features. This role does not allow access to buy a number or create new regulatory bundles. *** Product: Phone Numbers Role: Numbers Configuration Viewer Description: Provides read only access to view numbers configurations for Voice & Messaging features. This role does not allow access to configure numbers and buy a number and create new regulatory bundles. *** Product: Phone Numbers Role: Numbers Inventory Manager Description: Provides access to buy a number and repurchase released numbers. This role does not allow access to configure numbers and create new regulatory bundles. *** Product: Phone Numbers Role: Porting One Console Description: Full access to create, read, list and delete Port in requests. *** Product: Data Ingress Role: Data Ingress Admin Description: Provides full admin permissions for Data Ingress. Users can have full access on data sources , datasets and syncs. *** Product: Data Ingress Role: Data Ingress Analyst Description: Provides analyst permissions for Data Ingress. Users can view sources and datasets, trigger manual data syncs, but cannot modify sources or datasets. *** Product: Data Ingress Role: Data Ingress Editor Description: Provides edit permissions for Data Ingress. Users can build and manage integrations but cannot delete them. *** Product: Data Ingress Role: Data Ingress Viewer Description: Provides read-only permissions for Data Ingress. Users can view data sources, datasets, and configurations. *** Product: Email Role: Email Admin Description: Provides admin permissions to configure and use all settings within the Email channel. *** Product: Event Streams Role: Event Streams Admin Description: Full access to Event Streams product. Events Streams allows any Twilio customer to subscribe to events representing every interaction sent or received on Twilio. *** Product: IAM Role: Account API Access Admin Description: Provides access to view, create and delete API keys, Auth tokens, OAuth apps, Credentials and Connect apps within an account or subaccount. *** Product: IAM Role: Account API Access Viewer Description: Provides access to view API keys, Auth tokens, OAuth apps, Credentials and Connect apps within an account or subaccount. *** Product: Knowledge Role: Knowledge Admin Description: Provides full admin permissions for Knowledge. Users can manage knowledge bases, knowledge documents, and all knowledge resources including delete access. *** Product: Knowledge Role: Knowledge Editor Description: Provides edit permissions for Knowledge. Users can create and update knowledge bases and documents but cannot delete them. *** Product: Knowledge Role: Knowledge Viewer Description: Provides read-only permissions for Knowledge. Users can view knowledge bases, documents, and search knowledge. *** Product: Memory Role: Memory Admin Description: Provides full admin permissions for Customer Memory. Users can manage memory stores, profiles, trait groups, and all memory resources including delete access. *** Product: Memory Role: Memory Editor Description: Provides edit permissions for Customer Memory. Users can create and update memory resources but cannot delete profiles, trait groups, or observations. *** Product: Memory Role: Memory Viewer Description: Provides read-only permissions for Customer Memory. Users can view memory stores, profiles, and all memory resources. Users can also perform lookups. *** Product: Voice Role: Voice Admin - no PII Description: Read/write/update access to Programmable Voice operations that do not have PII in the Twilio Console. *** Product: Voice Role: Voice Intelligence Admin Description: Provides permissions to view, modify and configure voice intellligence transcripts and services. *** Product: Voice Role: Voice Intelligence Viewer Description: Provides permissions to view voice intellligence transcripts and services. *** Product: Trust Hub Role: Trust Hub Admin Description: Trust Hub Admin role for managing all compliance registrations, Profiles and regulations in Trust Hub pages. *** Product: Trust Hub Role: Trust Hub Viewer Description: Trust Hub One Console Viewer role for viewing all compliance registrations, Profiles and regulations resources in Trust Hub pages. *** Product: Help Center Role: Twilio Help Center - Account Level Ticket History Description: Provides users with visibility to all support tickets generated within the help center by authorized account users, this includes sub-accounts which roll up to the parent account. This role also allows for users to be added as 'contributors' to support tickets, they will be able to comment, add cc's, add attachments and resolve tickets. *** Product: Twilio Watch Role: Twilio Watch Admin Description: Full access to Twilio Watch product. Twilio Watch allows customers to search and query logs across all Twilio products. *** Product: Twilio Watch Role: Twilio Watch Viewer Description: Allows a user to access Twilio Watch in read-only mode. Twilio Watch allows customers to search and query logs across all Twilio products. *** ## Organization Roles Organization roles include: *** Product: Organization Role: Organization Admin Description: Access to the Admin Center to manage the Organization and perform administrative actions like inviting users, removing users, adding existing accounts, creating accounts, modifying user accounts, and changing Organization settings. Organization Admins are not able to delete the organization. *** Product: Billing Role: Organization Billing Admin Description: View and manage billing settings, payment methods, usage, and invoices for all Billing Groups and linked accounts across the organization *** Product: Billing Role: Organization Billing Viewer Description: View-only access to billing settings, payment methods, usage, and invoices for all Billing Groups and linked accounts across the organization *** Product: Organization Role: Organization Owner Description: Access to the Admin Center with full access to invite and revoke access for new users, see billing history and make changes, and change project settings. Organization Owner can delete the organization and change ownership. *** Product: Organization Role: Organization Standard User Description: No access to the Admin Center to manage your Organization in any capacity. This role is the default you would assign to most of the users in your Organization. Standard users only have access to the accounts that you allow. *** Learn more about [Organization roles](/docs/iam/organizations#organization-roles). ## Resource-based Roles Resource-based roles enable more granular access, as they provide access to specific resources rather than all of them. We currently support only one resource for such roles at the organization level, which is the **Billing Group**. *** Product: Billing Role: Billing Group Admin Description: View and manage billing settings, payment methods, usage, and invoices for a specific Billing Group and its linked account(s) *** Product: Billing Role: Billing Group Viewer Description: View-only access to billing settings, payment methods, usage, and invoices for a specific Billing Group and its linked account(s) ***