Workspace Owner

This functionality in in private beta

The Workspace owner role has full administrative access, while the Admin role becomes more restricted. Use the new Admin role to allow updating most routine settings without granting access to billing or security configurations.

The Basics⁠

When you opt in, all existing Admins will be retitled to Workspace Owners and the updated Admin role will be available for use. No changes will occur to Member or Guest roles.

Using the now limited Admin role, Workspace Owners can allow a greater number of Admins to handle routine tasks like managing public teams, without increasing the number of people with access to your workspace's most sensitive settings.

Workspace Owners can manage which roles have access to workspace-level actions through Settings > Administration > Security under the "Workspace restrictions" section.

Permissions by role⁠

Legend:

✅ Available

❌ Unavailable

🟨 Available by default, but can be restricted in security settings

🟣 Admins can only manage team settings for public teams or private teams they are a member of

Action	Workspace Owner	Admin
Workspace configuration
Change workspace name, icon, enable/disable features at workspace level	✅	❌
Delete workspace	✅	❌
Restrict workspace creation	✅	❌
Security & compliance
Manage security settings	✅	❌
View audit log	✅	❌
Manage OAuth app approvals	✅	❌
User & access management
Invite users	✅	🟨
Promote or demote members to admin	✅	✅
Promote or demote admins to owners	✅	❌
Team management
Create and delete teams	✅	✅
Manage all public teams	✅	✅
Manage all private teams	✅	🟣
Manage Triage Rules	✅	🟣
Integrations and API
Enable and disconnect integrations	✅	✅
Manage API settings	✅	🟨
Create webhooks	✅	🟨
Create OAuth apps	✅	🟨
Workflows
Manage Labels	✅	🟨
Manage Project Statuses	✅	✅
Manage SLA settings	✅	✅
Manage AI settings	✅	✅
Manage Customer Requests	✅	✅
Data & billing
Billing	✅	❌
Workspace imports	✅	🟨
Workspace exports	✅	❌

Managing admin and owner roles with SCIM⁠

If your workspace has SCIM enabled and is currently managing permissions via linear-admins, all permission changes will need to occur via SCIM.

By default, your linear-admins group will be updated to manage owners, not admins, however the name of the group will not change automatically.

If you now want to start managing admins, you'll need to rename the existing linear-admins group (the new name does not matter, but we'd recommend something like linear-owners), and create a new linear-admins group. When the new group is pushed, it will now be managing admins.

If you're starting fresh with SCIM, you'll need to create a linear-owners group to manager owners, in addition to the groups described here.