---
title: "Users & Permissions"
description: "Manage team members, permissions, custom roles, and Single Sign-On (SSO)."
category: "manage-prismic"
lastUpdated: "2026-01-14T13:14:04.000Z"
---

Collaborate with your team while keeping control over who can see and change content. This guide shows how to invite users, assign roles, and set up advanced access options.

# Manage users

Add and remove team members in your repository settings.

### Invite users

Starting from the starter plan, you can invite users to your repository. Go to **Settings > Users**.

Enter their email, choose a role (if available), and send the invite. They’ll get an email and also see the pending invite in their [dashboard](https://prismic.io/dashboard).

### Remove users

Go to **Settings > Users** and click the Remove button next to their name.

## Transfer ownership

Only the repository owner can transfer ownership to another user.

> **Important**
>
> <CalloutHeading>Warning: Billing information</CalloutHeading>
>
> When you transfer ownership, all the payment details, including any credit card information, remains on the repository. To avoid service interruptions or billing disputes, make sure the new owner updates necessary billing information after the transfer.
>
> If you wish to remove your credit card information from a repository, downgrade to a free plan and contact us through the [support portal](https://prismic.atlassian.net/servicedesk/customer/portals).

* In **Settings > Users**, scroll to **Transfer ownership**.
* On the free plan (single user), enter the new owner’s email. The transfer is completed once the new owner accepts the invitation.
* On paid plans, select user who you'd like ownership transferred to. The transfer happens immediately.

If the current owner has lost access to a repository, an administrator can request ownership through the [support portal](https://prismic.atlassian.net/servicedesk/customer/portals).

# Repository roles

Repository roles define what each user can do across the entire repository.

In Small and Starter plans, all users are Administrators. Plans from Medium and above include additional roles for more granular control.

Go to **Settings > Users** and use the Role Type dropdown next to the user’s name.

The table below describes each role:

<Table>
  <tbody>
    <tr>
      <TableCell>Writer</TableCell> <TableCell>Create and edit pages and releases</TableCell>
    </tr>

    <tr>
      <TableCell>Publisher</TableCell>

      <TableCell>
        Everything a Writer can do, plus: <br /> - Publish and delete pages and releases
      </TableCell>
    </tr>

    <tr>
      <TableCell>Administrator</TableCell>

      <TableCell>
        Everything a Publisher can do, plus: <br /> - Create and edit page types and slices <br />- Edit repository settings <br />- Manage user roles <br />- Manage custom roles per locale in spaces (Enterprise only) <br />- Access and edit billing information
      </TableCell>
    </tr>

    <tr>
      <TableCell>
        Repository Owner <br /> *(one per repository)*
      </TableCell>

      <TableCell>
        Everything an Administrator can do, plus: <br />- Transfer ownership <br />- Delete repository
      </TableCell>
    </tr>

    <tr>
      <TableCell>
        Contributor<br />*(Enterprise only)*
      </TableCell>

      <TableCell>
        When [Custom Roles](https://prismic.io/docs/users.md#custom-roles-enterprise) are active, users who are Writers or Publishers appear as Contributors at the repository level. Their permissions are configured in Space settings > User roles
      </TableCell>
    </tr>
  </tbody>
</Table>

# Custom roles

> **Important**
>
> <CalloutHeading>Custom roles per locale are available on Enterprise plans.</CalloutHeading>
>
> [Check out our pricing page](https://prismic.io/pricing) and reach out to our Sales team for more information.

If you use [multiple locales](https://prismic.io/docs/locales.md), custom roles lets you define permissions for each locale within a Space.

In **Space settings > User roles**, choose what each person can do in their assigned locales for that Space, or apply a role to everyone in the repository for that Space.

The table below describes each role:

<Table>
  <tbody>
    <tr>
      <TableCell>Read-only</TableCell> <TableCell>View pages and releases</TableCell>
    </tr>

    <tr>
      <TableCell>Writer</TableCell>

      <TableCell>
        Everything a Read-only can do, plus: <br />- Create and edit pages and releases
      </TableCell>
    </tr>

    <tr>
      <TableCell>Publisher</TableCell>

      <TableCell>
        Everything a Writer can do, plus: <br />- Publish and delete pages and releases
      </TableCell>
    </tr>

    <tr>
      <TableCell>Repository owner and Administrators</TableCell>

      <TableCell>
        Administrators can do everything a Publisher can do, plus: <br />- Full access in all locales and Spaces. Custom Role restrictions do not apply to them.
      </TableCell>
    </tr>
  </tbody>
</Table>

# SSO

> **Important**
>
> <CalloutHeading>SSO is available on Enterprise plans.</CalloutHeading>
>
> [Check out our pricing page](https://prismic.io/pricing) and reach out to our Sales team for more information.

Enterprise customers can enable Single Sign-On (SSO) to control login through their company’s IDP. Prismic supports OAuth2 identity providers (IdP) including Google, Okta, Microsoft Entra ID, and Auth0.

Go to our [Support Portal](https://prismic.atlassian.net/servicedesk/customer/portals) to request SSO setup. We will reach out to you with a link that will provide instructions and steps to set up SSO for your company.