faq page header background

What user roles and permissions are available in Scrunch?

  • Also asked as:
  • How do role-based access controls work in Scrunch?
  • What permission levels can I assign to users?

Four user roles are available in Scrunch: Admin, Editor, Viewer, and Guest. Admins have full organizational access, Editors can create and modify content, Viewers have read-only access, and Guests (agency accounts only) see only specific brands. Permissions can be customized per brand for granular control.

Additional context: Organization-wide roles can be overridden at the brand level, allowing users to have different permissions for different brands within the same account.

Image of Members screen in Scrunch

Example

For example, if a Scrunch admin wanted to manage user permissions, they would navigate to the Members section of the Settings menu (for multi-brand orgs and agencies) or the Team Members tab in the left sidebar (for brands and agency guests) and assign a user’s role as:

Admin:

  • Full access across the organization
  • Can create and edit prompts, tags, and the Context tab
  • Can invite and remove users or adjust user permissions
  • Can create new brands (agency accounts only)

Editor:

  • Can create and edit prompts, tags, and the Context tab
  • Cannot add and remove users or create new brands

Viewer:

  • Read-only access across all brands in the organization
  • Cannot make changes

Guest (agency accounts only):

  • Read-only access to the specific brand they were invited into
  • Cannot view other brands in the organization

Follow-up question: What are best practices for using role-based access controls?

Follow the principle of least privilege by assigning Scrunch users only the minimum role they need to perform their work. For example, give marketing stakeholders Viewer access rather than Editor if they only need to review data, not create prompts.

Review user access quarterly to remove inactive accounts and adjust roles as responsibilities change. Start with conservative organization-wide roles, then use per-brand permission upgrades for users who need elevated access to specific brands without full organizational privileges.