> For the complete documentation index, see [llms.txt](https://docs.lassomoderation.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.lassomoderation.com/moderator-toolkit/roles-and-permissions.md). # Roles & Permissions Control what each member of your moderation team can see and do with the Admin, Moderator and Category Moderator roles. Every member of your team has a role. The role decides which parts of the dashboard they can open and which changes they can make. Lasso has three roles: **Admin**, **Moderator** and **Category Moderator**. The roles build on each other. A Moderator can do everything a Category Moderator can, and an Admin can do everything a Moderator can. {% hint style="info" %} Roles are available on the Pro and Enterprise plans. On other plans every team member is an Admin. {% endhint %} ### The three roles **Admin** owns the workspace. Admins configure Lasso (API keys, webhooks, integrations, moderation preferences), manage the team, edit policies, set up review queues and have access to analytics and data exports. Give this role to the people responsible for your moderation setup. **Moderator** handles day-to-day moderation across your whole platform. Moderators review content and users in every category and every review queue, handle user reports, and maintain the automation that supports them: rules and lists. They can read your policies but not change them, and they have no access to settings, the team or analytics. **Category Moderator** is a moderator who only sees part of your platform. They work on the content, review queues and content reports of the categories you assign to them, and nothing else. This suits community volunteers, outsourced teams or specialists who should only moderate one area, for example a single forum, language or game. ### What each role can do | | Category Moderator | Moderator | Admin | | --------------------------------------------------------- | ---------------------------------------------- | ----------- | ---------- | | Categories they can see | Assigned categories only | All | All | | Review queues they can work in | Queues shared with them or with all moderators | All | All | | Review and act on content | ✅ | ✅ | ✅ | | Act on users (flag, ban, strike, message, tag, add notes) | ✅ | ✅ | ✅ | | Handle content reports | ✅ | ✅ | ✅ | | Users page | Only when users are tied to categories | ✅ | ✅ | | User reviews and user reports | ❌ | ✅ | ✅ | | Create and edit rules | ❌ | ✅ | ✅ | | View lists and edit their entries | ❌ | ✅ | ✅ | | Download or delete a list | ❌ | ❌ | ✅ | | View policies | ❌ | ✅ | ✅ | | Edit policies | ❌ | ❌ | ✅ | | Create and edit review queues | ❌ | ❌ | ✅ | | Audit logs | Own actions | Own actions | Whole team | | See users' IP addresses | ❌ | ❌ | ✅ | | Analytics | ❌ | ❌ | ✅ | | Settings, compliance and data exports | ❌ | ❌ | ✅ | | Manage the team and AI Moderators | ❌ | ❌ | ✅ | A few of these deserve a closer look: * **Audit logs.** Moderators and Category Moderators only see the actions they took themselves. Admins see the actions of the whole team, rules and AI Moderators, can filter by moderator, and can see whether the webhook for an action was delivered. * **IP addresses.** Only Admins see a user's IP addresses. All roles can still open the list of other users on the same IP from a user's page, which is what moderators need to spot duplicate accounts. * **Users page.** Category Moderators normally have no Users page. The exception is a workspace where users are tied to categories, which Lasso enables on request. There, Category Moderators get the Users page and see only the users of their assigned categories. * **User actions.** Which user actions are available at all (banning, unbanning) is set for the whole workspace under **Settings → Moderation Preferences**, see [user moderation](/managing-users/user-moderation.md). Roles do not change this. {% hint style="info" %} Need a different split, for example Moderators who can see analytics? Contact . Individual permissions can be moved to another role for your workspace. {% endhint %} ### Assigning a role Roles are managed by Admins on the **Team** page. 1. Open **Team** and click **Invite moderator**. 2. Fill in **Name** and **Email**, and pick a **Role**. 3. Send the invite. The new team member appears in the table as **Invited** until they accept. To change a role later, use the dropdown in the **Role** column. You can only hand out your own role or a lower one, and you cannot change your own role.
### Choosing categories for a Category Moderator The **Category access** column on the **Team** page shows what each team member can see. Admins and Moderators always show **All categories**. For a Category Moderator, click the cell, search for the categories they should moderate and select them. A Category Moderator without any categories sees no content, so assign at least one right after inviting them. Changes apply immediately. Category access also limits review queues. A Category Moderator only works in [review queues](/automation-and-review/review-queues.md) that are shared with them or with all moderators, and within those queues only sees reviews from their categories.
### Roles for AI Moderators AI Moderators appear on the **Team** page too and have a role and category access like any other team member. Give an AI Moderator the Category Moderator role to have it moderate only part of your platform. ### Related pages * [Review queues](/automation-and-review/review-queues.md): choose which moderators work in which queue. * [Lists](/automation-and-review/lists.md) and [user reports](/automation-and-review/user-reports.md). * [Key concepts](/getting-started/key-concepts.md): how categories, the team and moderation fit together.