Roles and permissions

Velloo Cloud has one organization per account. Everyone in it has one role, and people below admin also belong to one or more teams. Guests sit outside the organization: they are invited to a single board and need no account.

Roles

Role	Seat	What it’s for
Owner	Paid	The one person responsible for the organization. Can do everything, including deleting it and handing it to someone else.
Admin	Paid	Runs the whole organization: people, teams, boards, usage, and the audit log. Admins aren’t on teams; they reach every team.
Admin with purchasing	Paid	An admin who can also buy credits and seats, upgrade the plan, and manage invoices and cards. Only the owner grants this.
Member	Paid	Publishes boards to the teams they’re on, and comments on every board they can see.
Reviewer	Free	Someone in your organization who views and comments, and never publishes. Meant for product managers, founders, and anyone who reviews the work.
Team admin	—	An extra a member can hold on a team (Business). Runs that team’s people and boards.
Guest	Free	Someone outside the organization, invited by email to one board. Any plan.

Members take a paid seat; reviewers and guests are free. Someone can switch between member and reviewer once every 7 days.

Reviewer or guest?

Both comment and neither pays, but they sit on different sides of your organization:

	Reviewer	Guest
Who they are	Part of your organization	Outside it, such as a contractor or a partner
How they join	An invitation to the organization, as a reviewer	An email invitation to one board
Account	Signs in with a Velloo account	None: a personal link opens the board as them
What they see	Every board their teams can see	Only the board they were invited to
@mentions	Can mention, and be mentioned	Neither
Resolving threads	Threads they started	Never
Becomes a member	Yes, by switching role (once every 7 days)	No; invite them to the organization instead

Use a reviewer for someone who follows the work over time, and a guest for a one-off look at a single board. For a board anyone should be able to comment on, turn on public commenting instead.

Plans

	Free	Team	Business
People	The owner, plus reviewers	+ admins and members	Same as Team
Teams	One	One	As many as you need, with team admins
Who can open a board	Anyone with the link	+ your organization, or a password	+ a single team
Commenting	Guests, and public commenting on any board	Same as Free	Same as Team

On Free, only the owner publishes, but they can invite as many reviewers and guests as they like, so a design gets real feedback before anyone pays. Making someone a member or admin needs Team or Business.

If a subscription lapses, the organization drops to Free but keeps its people and boards. Only the owner publishes, and only while the organization has no more boards than Free allows. Existing private and password boards stay as they are, but no new ones can be made. Everyone else can still sign in, view and comment, and leave the organization.

The organization

Action	Who can do it
Delete the organization	Owner (on Free, with no boards or credits left)
Transfer ownership	Owner
Rename, set a custom subdomain	Owner, admins (subdomains need Business)
See usage and credit balance	Owner, admins
See the audit log	Owner, admins, and team admins for their teams
Leave	Anyone but the owner

People and teams

Action	Who can do it
Invite a member or reviewer	Owner, admins. Team admins invite into their own team (members only while a seat is free). On Free, reviewers only.
Make, change, or remove an admin	Owner
Grant or remove purchasing power	Owner
Switch someone between member and reviewer	Owner, admins, and team admins for people on their team
Remove someone from the organization	Owner, admins
See who is in the organization	Everyone sees names and teams; admins also see emails and roles
Create a team	Owner, admins (Business)
Rename a team	Owner, admins, the team’s admin
Make a team the default	Owner, admins
Delete a team	Owner, admins. Its boards move to another team or are deleted, whichever you choose.
Add or remove someone on a team, make a team admin	Owner, admins, the team’s admin
Move someone from one team to another	Owner, admins, or someone who is team admin of both

Everyone below admin is always on at least one team. The default team catches new people, and it can’t be deleted; to delete it, make another team the default first. To take someone off their last team, move them to another team instead.

Billing

Action	Who can do it
Buy credits, set auto-reload and spending limits	Owner, admins with purchasing
Upgrade, buy seats, manage invoices and cards	Owner, admins with purchasing
Downgrade or cancel	Owner
Spend credits on image generation	Everyone but reviewers

Boards

Action	Who can do it
Publish a new board	Owner and admins, to any team; members, to their own teams
Publish a new version of a board	Its author
Delete a board, change who can open it, reveal its password	Its author, the owner, admins, the board’s team admin
Move a board to another team	Owner, admins; a team admin of both teams; the author, if they can publish to both
Change a board’s author	Owner, admins, the board’s team admin
Share a board with a guest, or remove one	Its author, the owner, admins, the board’s team admin

Who can open a board is set when you publish it, and can be changed later:

• Anyone with the link. No sign-in needed.
• Your organization. Everyone in it: members, reviewers, and admins.
• One team. That team’s members and reviewers, plus the owner and admins. Business only.
• A password, on top of any of these. Anyone who has it can open the board.

A guest’s link opens their board whatever it’s set to, including past a password.

When you’re on more than one team, velloo publish asks which team the board belongs to (or pass --team). --team-only limits the board to that team.

Comments

Action	Who can do it
Comment and reply	Everyone in the organization who can open the board; guests on their board; anyone else only while public commenting is on
Delete your own comment	Everyone, guests included
Delete anyone’s comment	The board’s author, the owner, admins, the board’s team admin
Delete a whole thread	The board’s author, the owner, admins, the board’s team admin
Resolve or reopen a thread	The board’s author, the owner, admins, the board’s team admin; anyone else signed in, on threads they started. Guests never resolve.
@mention someone	People in the organization, for others who can open the board

Public commenting

Every board has a public commenting switch, off by default and available on every plan. With it off, only your organization and invited guests can comment, and other visitors see no comments at all. With it on, anyone who can open the link can comment after giving their name. An email is optional and only used to tell them about replies. It’s never shown.

Turn it on when you publish (velloo publish --public-comments) or later from the board’s Sharing & access panel. On a password-protected board, the same switch decides whether people who know the password can comment.

Notifications

A board’s author hears about new threads. Everyone in a thread hears about replies, at most once every 10 minutes per thread. People are notified when they’re @mentioned. Guests only get emails if they left an address, and can switch them off from any email.