Workspace-level permissions
Billing, plan changes, custom domains, SSO configuration and workspace deletion are owner-only. Admins can do everything else at workspace level, including branding, integrations and creating boards.
Board-level permissions
Moderators change statuses, merge duplicates, pin posts, hide spam and post official replies. Members comment, vote and submit on behalf of customers but cannot change a post's status.
Board-level overrides let you promote someone to moderator on a single board without giving them workspace-wide rights — useful when a support lead owns the bug board only.
What end users can do
Voters are not seats. They submit, vote, comment and follow posts on public boards. Whether they must sign in first is a per-board setting: anonymous voting maximises volume, required sign-in maximises signal.