Roles and permissions
What the Owner and each role on your team can see and do in Koast.
Every teammate has one role, plus the ad accounts you gave them when you invited them. The Owner is the person who owns the organization. That isn't a role you pick when you invite someone, it comes with owning the account, and it's what unlocks Billing.
Roles at a glance
| Role | Ad accounts | What they can do |
|---|---|---|
| Owner | All | Everything, including Billing. The only person who sees the Billing tab. |
| Admin | All. Choosing Admin when you invite selects every ad account. | Everything except Billing: invite and remove teammates, change their access, see team activity and login history, manage ad accounts and integrations. |
| Media Buyer | Only the ones assigned | Media buying in their assigned ad accounts. Sees the Ad Accounts and Facebook settings. |
| Content Manager | Only the ones assigned | Works in Creatives. Pages outside it send them back to Creatives. |
| View Only | Only the ones assigned | Sees every page but can't change anything. |
Settings each role sees
| Settings tab | Owner | Admin | Media Buyer | Content Manager | View Only |
|---|---|---|---|---|---|
| Account, Agent, API & Webhooks | Yes | Yes | Yes | Yes | Yes |
| Ad Accounts | Yes | Yes | Yes | No | No |
| Fee balance, once your organization pays for an ad account by card | Yes | Yes | Yes | No | No |
| Organization | Yes | Yes | No | No | No |
| Billing | Yes | No | No | No | No |
On API & Webhooks, only the Owner and Admins see the organization's API keys and webhooks. Everyone else sees just Authorized apps, the apps they signed in to with their own Koast account.
Integrations follow the same rules. Facebook goes with Ad Accounts: the Owner, Admins and Media Buyers. Frame.io and Higgsfield are open to every role. Slack, Google Drive, Dropbox and the trackers depend on each role's integration access.
View Only in detail
A View Only teammate can open and read every page, including Ads Manager, Pipeline and Agent Tasks. Koast refuses any change they try to make:
These are the exceptions, and they all work normally:
- Switching between their ad accounts.
- Dismissing the What's new window.
- Choosing which emails they get, under Email notifications on their Account tab. See Account settings and appearance.
- Commenting on items in Pipeline, including editing and deleting their own comments.
- Pausing Koast Agent for their brand with Pause in Settings, Agent. Resuming it needs a role that can make changes.
- Taking themselves off the agent's weekly summary, if they get it, with Remove me in Settings, Agent.
There's one more exception. Someone who is View Only and also an organization admin isn't refused at all: admin wins, and every action works as if they had a full role.
They don't get Launch or ⌘L in the sidebar, campaign toggles are greyed out with the tooltip "View Only, read access", and n doesn't create Pipeline items. The Koast Agent composer is a special case: it looks normal and lets you type, but the message is refused when it's sent.
Good to know
- Change someone's role or ad accounts from Settings, Organization: open the ⋮ menu on their row and select Edit permissions. See Invite your team.
- One organization per person. A teammate can't be in two Koast organizations at once.
- Adding ad accounts. Any member except View Only can import one from the brand switcher. Only the owner and Admins can request a new one or add funds to it. See How brands and ad accounts work.
- Seats. Your plan sets how many teammates you can have. The Members row in Organization shows seats left.
Connect a Meta pixel to an ad account in Business Manager
Give an ad account access to your Meta pixel in Business Manager, so you can pick it when you launch from Koast.
Slack integration
Connect Slack so Koast can post campaign updates, Agent Task messages and Pipeline notifications to your channels.