Skip to content
healthcheck.email Sign in

Who can do what

Everyone in a workspace has one of four roles. Each role can do everything the roles above it in this list can.

Viewer

  • See every domain, its report, mail flows, DNS and history.
  • Download a report as Markdown, and add a domain's dates to a calendar.
  • Tell us a finding looks wrong, or is expected for your setup.
  • Ask about a report.

Member

  • Add a domain, and check one again.
  • Name the services that send email for a domain, and confirm or dismiss the senders we found.
  • Verify a domain, so we check it every day.
  • Set up a DMARC rollout plan.

Admin

  • Switch a domain between Sends email and Doesn't send email. This changes what its report checks for, so it's for admins.
  • Archive a domain.
  • Create and revoke read-only share links and calendar feeds. Anyone with one of those links can see what it shows.
  • Invite people, change their roles, and remove them.
  • Rename the workspace.

Owner

  • Archive the workspace.
  • Make another person an owner. A workspace always keeps at least one owner.

In healthcheck.email

Admins and owners manage people under Settings, on the Members tab: they change roles and invite people there. Anyone can leave a workspace from the Workspaces page. Only an owner can make someone an owner, and an invitation can't grant owner.