---
title: Owner, Admin, and Member
description: "What Owner, Admin, and Member each can do in quickS3, and why making someone an Admin gives them no access at all to your files."
section: Access
order: 20
audience: [owner, admin, member]
status: published
lastVerified: 2026-09-15
sources:
  - src/objects/organisation.constants.ts
  - web/src/components/app/AppNav.tsx
  - web/src/components/app/permissions/PeopleList.tsx
---

Everyone in an organisation has one of three organisation roles. These decide who runs quickS3. They don't decide who can open which files; [custom roles](/docs/access/custom-roles/) do that.

| | Owner | Admin | Member |
| --- | --- | --- | --- |
| Open files | Everything | What their custom roles allow | What their custom roles allow |
| Invite and remove people, edit roles | Yes | Yes, except Owners | No |
| See the audit log | Yes | Yes | No |
| Test connections | Yes | Yes | No |
| Add, edit, or delete connections | Yes | No | No |
| Create buckets | Yes | No | No |
| Rename the organisation | Yes | No | No |
| Connect their own AI clients | Yes | Yes | Yes |

The tabs people see follow the same split. Members see **Overview** and **AI agents**. Admins also see **People**, **Roles**, **Audit log**, and **Connections**. Only Owners see **Settings**.

## Owner

Owners can do everything, including managing storage keys. They can open every bucket on every connection without needing a role. Every organisation keeps at least one Owner: quickS3 won't let you remove the last one or take away their Owner role.

Keep the number of Owners small. Anyone who can change connections can change which storage account the whole team is using.

## Admin

Admins run the organisation day to day: inviting people, building roles, and checking the audit log. They can make other people Admins, but can't make anyone an Owner or remove an Owner.

Admin gives no file access on its own. An Admin who also needs to work with files needs a custom role, like everyone else.

## Member

Members use the files their custom roles give them. A Member with no custom role can sign in but sees no buckets.

## Changing someone's role

On **People**, select the person's roles, tick or untick **Owner** or **Admin**, and select **Save**. Only Owners can tick or untick **Owner**.