Default user roles
You must be an admin to change access permissions. To change permissions for various users, navigate to Settings > Team.
Each user in a workspace can be allocated one of five roles:
Admin
Has access to all features and settings in the workspace.
Client
Has access to view and export assets, creatives and templates.
Client Marketer
Has the same access as Client, plus the ability to add, edit and delete assets in the asset library.
Creative
Has access to all creative generation features.
Media
Has access to results, insights and scoring, as well as export of emails.
The full permissions allocated to each role can be viewed in detail in the PDF below:
Pencil Roles and Permissions August 2026
Custom user roles
Subscription admins have the ability to:
Create custom roles with tailored permission settings.
Rename any custom role to match your team’s structure.
Copy any role, including default roles, to use as a starting point.
Disable roles, including every default role apart from Admin, to temporarily prevent them from being used.
Delete custom roles you no longer need.
How it works
A subscription-level admin has access to create roles via Settings > Team.
To create a role, select the tab for User roles, then select Create custom role to name and describe the new role. Then to edit your roles, select Edit permissions, simply tick the combination of permissions that you wish to apply to that role and then hit Save.
Default roles can’t be deleted. Creative, Media, Client and Client Marketer can be disabled if you no longer want them assigned, but the Admin role can’t be disabled.
Only enabled roles can be assigned from the Manage Team page. If a role is disabled or deleted, everyone with that role must be reassigned to a new one, and the same replacement role will apply to all affected users.
Once roles are assigned, changes take effect the next time users log in.
Please note that custom roles are a subscription-level feature, so change to roles and role permissions will apply across all of your workspaces. These changes can only be made by a subscription-level admin, not an individual workspace admin.
Assigning a custom role
After creating a custom role, go to the Manage Team page.
This page shows:
All users in the workspace.
Their assigned roles.
You can reassign a user to the new custom role from this page.
Please note: The role change only applies within the specific workspace where you assign it. Subscription admins can assign roles in any workspace they have access to, but this must be done one workspace at a time, as there is currently no option to assign roles across all workspaces at once.
Disabling a custom role
If you later return to Custom Roles and disable a role that is currently assigned to users, you will be prompted to reassign those users to a different role.
Once you select a replacement role:
All users who had the disabled custom role will be updated.
This change applies across all workspaces within the subscription.
Please refer to our guidance PDF for the available permissions: