Permissions reference

Catchbase has three roles: Admin, Editor, and Viewer. This page lays out what each role can do, grouped by area of the product.

Before you start

For a short explanation of what each role is for, see User roles and permissions.
For the day-to-day "how do I invite someone" task, see Team management.

Admin. The customer's organization owner. Full control: manages billing, invites users, assigns roles, connects and disconnects integrations, and has full read and write access to campaign data.
Editor. Day-to-day operator. Can read and change campaigns, ad groups, keywords, budget allocations, incrementality tests, and discovery automations. Cannot manage billing, invite users, change roles, or delete integrations.
Viewer. Read-only. Can see everything in the organization. Cannot change anything.

Area	Admin	Editor	Viewer
View your own organization and its roles	✅	✅	✅
View your own profile	✅	✅	✅
View the list of users in the organization	✅	✅	✅
Invite users and view pending invitations	✅
Add, remove, or change the role of an existing user	✅

Area	Admin	Editor	Viewer
Start checkout for a new subscription	✅
Open the billing portal, update payment method, view invoices	✅

Area	Admin	Editor
View the Apple Ads integration list	✅	✅
Update an existing Apple Ads integration (refresh, toggle campaign groups)	✅	✅
Create a new Apple Ads integration	✅
Delete an Apple Ads integration	✅

Area	Admin	Editor	Viewer
View App Store Connect keys and bound apps	✅	✅	✅
Update the app list on an existing ASC key	✅	✅
Create a new ASC key	✅
Delete an ASC key	✅

Area	Admin	Editor	Viewer
View the MMP integration	✅	✅	✅
Create, update, or delete the MMP integration	✅

Area	Admin	Editor	Viewer
View campaigns, campaign groups, ad groups, and keywords	✅	✅	✅
Create and edit campaigns, ad groups, and keywords	✅	✅
Update campaign groups (activate or deactivate)	✅	✅
Delete campaigns, ad groups, or keywords	✅

Area	Admin	Editor	Viewer
View budget allocations	✅	✅	✅
Edit an existing allocation (percentages, total budget, activate / deactivate)	✅	✅
Create a new allocation or delete one	✅

Area	Admin	Editor	Viewer
View incrementality tests and their results	✅	✅	✅
Update a running or completed test (including running a refreshed analysis)	✅	✅
Create a new incrementality test or delete one	✅

Area	Admin	Editor	Viewer
View discovery automations	✅	✅	✅
Create and edit discovery automations	✅	✅
Delete a discovery automation	✅

Read is broad: every role can read most things. Viewer is read across the board; Editor reads everything plus writes most day-to-day operations; Admin reads and writes everything in the customer surface.
Delete is Admin-only: Editors cannot delete campaigns, ad groups, keywords, integrations, budget allocations, incrementality tests, or discovery automations. The pattern is deliberate. If an Editor needs to remove something, ask an Admin.
Integration management is Admin-heavy: creating and deleting any integration is Admin-only. Editors can update the Apple Ads and ASC integrations they help operate day to day but cannot create or delete them, and cannot touch the MMP.
Billing is Admin-only: neither Editor nor Viewer can open the billing portal or run checkout.