Manage roles and permissions

A guide for understanding and modifying member roles and permissions at the workspace level and the project level.

Control access to your data and projects by assigning roles with specific permissions to your team members.

Member roles define what a user can see and do within Labelbox. Roles can be assigned with a workspace-wide scope, giving access to all projects, or a project-based scope, limiting access to specific projects. These two scopes are mutually exclusive.

Member roles can be assigned to individual members or groups, which consist of members that share the same project assignments, whose permissions can be managed together. Member roles can be set to the following scopes:

Scope	Description
Workspace-wide roles	Can access all projects with their default role. This role can’t be overridden at the project level.
Project-based using Groups	Can access all projects assigned to their group. They inherit their role from the Default role in their user profile.
Project-based using manual assignment	Can be manually assigned to specific projects. Admins can specify their user role, or it will be inherited from the Default role in their user profile.
Custom Role	Can be customized by selecting from available permissions. Allows granular control.

Workspace-wide roles

A workspace-wide role applies to every project in the workspace and cannot be overridden at the project level. This is ideal for administrators or managers who need broad access.

To change a member’s workspace-wide role:

1. Navigate to Workspace settings in the bottom-left corner and select the Members tab.
2. Use the search bar to find the member whose role you want to modify.
3. Locate the member in the list. Their current role will be displayed in the Workspace Role column.
4. Click on the current role name (e.g., “Admin”, “Team Manager”). A dropdown menu will appear.
5. Select the new workspace-wide role from the list. The change is saved automatically.

Permission	Admin	Read-only Admin	Data Admin	Reviewer	Project Lead	Team Manager	Labeler
View datasets in Catalog
Import data/create new datasets in Catalog
Apply filters in Catalog
Create slices in Catalog
Create new batches
Rename a batch
Delete batches
Remove queued labels from a batch
Delete non-queued labels from a batch
Create/modify ontologies
Create/modify/delete projects
Invite new members to an organization
View projects and labels
Add/modify members on a project
Create/modify labels							own only(Except in Rework task)
Review labels							own only
Add a data row as a benchmark
Receive benchmark data rows for labeling
Delete labels
View own & team’s performance metrics				own only			own only
Create/update/delete/ resolve/reopen issues	Issues & comments set at project-level
Create/update/delete comments	Issues & comments set at project-level
Create an export
Models - full access
View Models
Access the Workflow tab in projects
Move data rows between steps
Request labeling services

Project-based roles

Project-based roles are assigned on a per-project basis, either by manually adding a member to a project or by adding them to a group. This allows for more granular access control.

If a user’s project access is granted through a group, you cannot modify their role on a project-by-project basis. You must either remove them from the group or change the group’s project assignments.

To change a member’s role on a specific project:

1. Navigate to Workspace settings and select the Members tab.
2. Use the search bar to find the member.
3. Click on the member’s name to open their detailed profile view. This view lists all the projects and groups they are assigned to.
4. Under the Projects section, find the project you want to modify.
5. Click on the current role name next to the project (e.g., “Labeler”, “Reviewer”). A dropdown menu will appear.
6. Select the new project-based role from the list. The change for that specific project is saved automatically.

Permission	Project-based project lead	Project-based team manager	Project-based reviewer	Project-based labeler
Import data/create new datasets
Create new batches
Rename a batch
Delete batches
Remove queued labels from a batch
Delete non-queued labels from a batch
Edit projects
Invite new members to an organization
Add/modify existing org members on a project
Create/modify labels				own only(Except in Rework task)
Review labels				own only
Add a data row as a benchmark
Receive benchmark data rows for labeling
Delete labels
View own & team’s performance metrics			own only	own only
Create an export
Create issues				on own assets only
Update/delete issues	own only	own only	own only	on own assets only
Resolve/Reopen issues				own only
Create/update/delete comments				on own assets only
Access the Workflow tab
Move data rows between steps
Request labeling services

Custom roles

For more granular control, Enterprise customers can create up to five custom project-level roles.

To create a custom role:

1. On the Workspace settings page, select User Roles.
2. Click + Create User Role.
3. Select the specific permissions for this role.
4. Add a name and description, then click Create.

Admins can define custom roles at project level by selecting from the following permissions:

Category	Permission
Admin	Add new members to the organization
	Access and interact with the API
	Cancel ongoing tasks
	Create new API keys for accessing services
	Delete members from an org
	Manage webhooks for the system
	Modify the membership of projects or organizations
	Modify organizational membership details
	Modify the organization’s profile
	Refresh organization entitlements
	Remove members from projects or organizations
	View performance metrics
	View project or organization members
	View project settings
	View user groups
	Manage workspaces within the system
Annotate	Clear all reservations made within the system
	Create new batches for processing data
	Create new benchmarks for performance evaluation
	Create export tasks for data
	Create comments on issues
	Create new labels for data
	Create prediction tasks or models
	Create new projects
	Create updates for projects
	Create reviews for tasks or projects
	Delete benchmarks
	Delete labels
	Delete a project
	Detach datasets from projects or tasks
	Manage data collections
	Manage categories for issues
	Change the status of issues
	Modify ontologies
	Modify the consensus settings of a project
	Modify project settings
	Change the status of projects
	Modify the workflow of projects
	View all labels within the system
	View benchmarks
	View custom metadata
	View ontologies
	View comments on issues made by others
	View labels created by other users
	View your own comments on issues
	View labels created by you
	View your own performance metrics
	View project details
	View project consensus settings
	View datasets associated with a project
	View external organizations associated with a project
	View the project’s labeling interface
	View the workflow of projects
	View the reporting dashboard
	View the schema tab
	View webhooks
	Clear your own reservations within the system
Catalog	Create new datasets within the system
	Create IAM (Identity and Access Management) integrations
	Create slices of data for analysis
	Delete individual data rows
	Delete datasets from the system
	Delete IAM (Identity and Access Management) integrations
	Modify batches of data rows
	Modify datasets within the system
	Modify IAM integrations
	Upload files to the system
	View batches of data
	View the data catalog
	View datasets within the system
Model	Delete model diagnostics
	Delete prediction tasks or models
	Manage model configurations
	Modify model diagnostics
	View model diagnostics

Workforce provider roles

When using an external labeling service, their team members are granted special roles with limited permissions. They can only see the labels created by their own team, ensuring your internal work remains private.

Permission	Workforce admin	Workforce team manager	Workforce reviewer	Workforce labeler
Import data/create new datasets
Attach a dataset to a project
Detach a dataset from a project
Add/edit/delete projects
Invite new members to an organization
Add/modify existing org members on a project
Create/modify labels				(own only)
Review/modify others’ labels
Delete labels
View own & team’s performance metrics
Create an export			(own only)	(own only)