What can a viewer do, and what needs an admin?
On every plan
A viewer can read every domain screen, press Check now and export a domain's records. Anything that changes the organization needs an admin: domains, members, the plan, alerts and the developer settings.
Organizations
An organization holds the domains, the plan and the bill, and it has members. You create your first organization when you sign up. You join another one when one of its admins invites you. Each organization has its own plan.
If you belong to more than one, the organization's name at the top of the app opens a list to switch between them.
Two roles
Each member is an admin or a viewer. There is no owner role: every admin can do everything listed below. An organization always keeps at least one admin, so the last admin cannot become a viewer, be removed or leave.
What a viewer can do
- Read every screen of every domain: sources, reports, DNS, readiness and alerts.
- Press Check now on a domain's DNS tab.
- Export a domain's records as CSV or NDJSON, or its report files as a zip, and download the export.
- Choose their own alert emails and summaries under Settings, Notifications.
- From Teams up, connect an assistant app such as Claude Desktop or ChatGPT. The app reads what that member can read, and changes nothing.
- Leave the organization.
Under Settings, a viewer sees Profile, Security, Members and Notifications.
What only an admin can do
- Add and remove domains, connect Cloudflare and publish records through it.
- Invite and remove members, and change a member's role.
- Change the plan and the billing details, under Plan and billing.
- Turn alerts on or off, change their thresholds and add shared channels.
- Name a source, and change a domain's readiness thresholds.
- Create API tokens and webhooks, and see or disconnect connected apps, under Developer.
- Turn on a share link or a relay for a domain.
- Download everything and delete the organization, under Data and privacy.
- Rename the organization, set its default language and choose how forensic reports are stored, under Organization.
Some of these need a plan that includes them, such as webhooks from Teams up. The plan table says where each one starts.
Admins get alert emails unless they turn them off. Viewers do not, unless they turn them on.
Members on each plan
- Starter: 1 member
- Pro: 3 members
- Teams: 15 members
- Enterprise: no limit
An invitation that is not accepted yet holds a place. It holds it until an admin withdraws the invitation or it expires after 7 days.
Published 27 October 2026 · Checked 27 October 2026