User Roles & Permissions

whoot. provides fine-grained role-based access control (RBAC) with 50+ permissions across 11 categories. Assign default roles or create custom ones tailored to your organisation.

Default Roles

Every tenant comes with three built-in roles:

Admin

Full control over the workspace. Admins can manage members, channels, billing, roles, SSO, and all settings. Every tenant must have at least one admin.

Member

Standard access. Members can join channels, transmit audio, use in-channel chat, and view recordings (if enabled). They cannot manage other users or change workspace settings.

Viewer

Listen-only access. Viewers can join channels and listen but cannot transmit audio. Useful for observers, stakeholders, or training scenarios.

Custom Roles

Create custom roles for granular access control. Navigate to Settings → Roles → Create Role and select from 50+ individual permissions.

Permission Categories

Permissions are organised into 11 categories:

Assigning Roles

Roles can be assigned when inviting a new member or changed at any time for existing members:

1. Go to Settings → Members
2. Click on the member you want to modify
3. Select a new role from the dropdown
4. Changes take effect immediately

Role changes are logged in the audit trail for compliance.

Channel-Level Permissions

Beyond workspace-level roles, each channel can have its own transmission policy:

• Open — All members can transmit audio
• Restricted — Only users with the "Voice transmit" permission can speak

This allows you to create channels like "Company All-Hands" where leadership speaks and everyone else listens.

Best Practices

• Principle of least privilege — Start with minimal permissions and add more as needed
• Use custom roles for specific teams — e.g. a "Support Lead" role with recording access but no billing access
• Regular access reviews — Periodically audit who has what permissions using the access review feature
• Document your role structure — Name roles clearly so team members understand their access level

Next Steps

• Security & Compliance — Audit logs and access reviews
• SSO Configuration — Automate provisioning with your IdP
• Team Setup Guide — End-to-end team onboarding