Understanding user roles and permissions

Last updated June 10, 2026

uplads doesn't use named roles like "admin" or "viewer." Instead, every team member has a small set of toggles that you mix and match, so you can give someone exactly the access they need — nothing more. This article explains each permission and how to combine them.

You set permissions when you invite a member and can change them any time from the Team page. If you only need the click-by-click steps for changing someone's access, see How to edit or remove a team member's access.

The permission set

A member's access is made up of six controls, grouped into scope (what they can see) and capabilities (what they can do):

Ad Accounts — which ad accounts this member can see and use. Either All accounts or a specific list you pick.
FB / IG Pages — which Facebook/Instagram Pages they can launch ads from. Either All pages or a restricted list.
Ad Spend — can view the Ad Spend reporting page.
View Configuration — can view naming conventions and creative enhancements.
Edit Configuration — can save changes to configuration settings.
Team Management — can invite and remove team members.

The first two are scope controls; the last four are simple on/off switches.

Restricting a member to specific ad accounts or Pages

By default a member can use every ad account and every Page connected to the workspace. To narrow that:

Open the member's Edit permissions dialog (the pencil icon on their row).
Under Ad Accounts, switch from All accounts to Specific accounts. A checklist of your connected ad accounts appears — tick only the ones this member should use.
Under FB / IG Pages, switch from All pages to Restrict pages. uplads loads your Pages from Meta, pre-selects them all, and lets you uncheck the ones to hide.

When you switch a Page list to restricted mode, uplads fetches the current Pages from your Meta connection, so the list always reflects what's actually available. If no Pages load, check that your Meta account is connected and authorized.

This scope flows through the whole app: a member restricted to two ad accounts simply won't see the others when launching or browsing the ads manager.

Configuration: view-only vs. edit

Configuration covers your workspace-wide settings — naming conventions, creative enhancements, AI provider keys, and notifications. There are two independent switches:

View Configuration lets the member open the configuration pages and see how things are set up, but every field is read-only.
Edit Configuration unlocks the Save actions so changes actually stick.

These are separate toggles, so the practical combinations are:

Both off — the member can't open configuration at all.
View on, Edit off — they can read settings but not change them. This is the most common setup for members who launch ads but shouldn't alter naming rules.
Both on — full access to read and save configuration.

If a teammate reports that configuration is greyed out, that's expected behaviour for view-only access — see Why is configuration greyed out or read-only for me?.

Granting ad-spend and team-management access

Two more switches control sensitive capabilities:

Ad Spend opens the Ad Spend reporting page, where the member can see budget and spend figures. Leave it off for anyone who shouldn't see cost data.
Team Management lets the member invite new people and remove existing members from the Team page. Grant this only to people you trust to manage workspace access — it effectively makes them a co-administrator.

Both are off by default, so you opt people in deliberately.

How the permission summary appears on member rows

On the Team page, each member's row shows a compact, comma-separated summary of their permissions so you can audit access at a glance. uplads builds it like this:

Ad accounts: All accounts or N account(s).
Pages: All pages or N page(s).
Ad Spend if enabled.
Config edit if edit is on; otherwise Config view if only view is on.
Team mgmt if enabled.

If a member has none of these, the row reads No permissions. Note that the summary only shows Config edit or Config view (edit takes precedence), so a member with both enabled appears as Config edit.

Default permissions for a new member

When you create a new invite, uplads starts everyone with the same baseline:

All accounts and All pages (full scope).
Ad Spend, View Configuration, Edit Configuration, and Team Management all off.

So a brand-new member can launch and manage ads across every account and Page, but can't see spend reporting, change configuration, or manage the team until you turn those switches on. Adjust the toggles before sending the invite, or edit them later from any member's row.