Skip to main content
Control access to your data and projects by assigning roles with specific permissions to your team members. Member roles define what a user can see and do within Labelbox. Roles can be assigned with a workspace-wide scope, giving access to all projects, or a project-based scope, limiting access to specific projects. These two scopes are mutually exclusive. Member roles can be assigned to individual members or groups, which consist of members that share the same project assignments, whose permissions can be managed together. Member roles can be set to the following scopes:
ScopeDescription
Workspace-wide rolesCan access all projects with their default role. This role can’t be overridden at the project level.
Project-based using GroupsCan access all projects assigned to their group. They inherit their role from the Default role in their user profile.
Project-based using manual assignmentCan be manually assigned to specific projects. Admins can specify their user role, or it will be inherited from the Default role in their user profile.
Custom RoleCan be customized by selecting from available permissions. Allows granular control.

​
Workspace-wide roles

A workspace-wide role applies to every project in the workspace and cannot be overridden at the project level. This is ideal for administrators or managers who need broad access. To change a member’s workspace-wide role:
  1. Navigate to Workspace settings in the bottom-left corner and select the Members tab.
  2. Use the search bar to find the member whose role you want to modify.
  3. Locate the member in the list. Their current role will be displayed in the Workspace Role column.
  4. Click on the current role name (e.g., “Admin”, “Team Manager”). A dropdown menu will appear.
  5. Select the new workspace-wide role from the list. The change is saved automatically.
PermissionAdminRead-only AdminData AdminReviewerProject LeadTeam ManagerLabeler
View datasets in Catalog
Import data/create new datasets in Catalog
Apply filters in Catalog
Create slices in Catalog
Create new batches
Rename a batch
Delete batches
Remove queued labels from a batch
Delete non-queued labels from a batch
Create/modify ontologies
Create/modify/delete projects
Invite new members to an organization
View projects and labels
Add/modify members on a project
Create/modify labelsown only(Except in Rework task)
Review labelsown only
Add a data row as a benchmark
Receive benchmark data rows for labeling
Delete labels
View own & team’s performance metricsown onlyown only
Create/update/delete/ resolve/reopen issuesIssues & comments set at project-level
Create/update/delete commentsIssues & comments set at project-level
Create an export
Models - full access
View Models
Access the Workflow tab in projects
Move data rows between steps
Request labeling services

​
Project-based roles

Project-based roles are assigned on a per-project basis, either by manually adding a member to a project or by adding them to a group. This allows for more granular access control.
If a user’s project access is granted through a group, you cannot modify their role on a project-by-project basis. You must either remove them from the group or change the group’s project assignments.
To change a member’s role on a specific project:
  1. Navigate to Workspace settings and select the Members tab.
  2. Use the search bar to find the member.
  3. Click on the member’s name to open their detailed profile view. This view lists all the projects and groups they are assigned to.
  4. Under the Projects section, find the project you want to modify.
  5. Click on the current role name next to the project (e.g., “Labeler”, “Reviewer”). A dropdown menu will appear.
  6. Select the new project-based role from the list. The change for that specific project is saved automatically.
PermissionProject-based project leadProject-based team managerProject-based reviewerProject-based labeler
Import data/create new datasets
Create new batches
Rename a batch
Delete batches
Remove queued labels from a batch
Delete non-queued labels from a batch
Edit projects
Invite new members to an organization
Add/modify existing org members on a project
Create/modify labelsown only(Except in Rework task)
Review labelsown only
Add a data row as a benchmark
Receive benchmark data rows for labeling
Delete labels
View own & team’s performance metricsown onlyown only
Create an export
Create issueson own assets only
Update/delete issuesown onlyown onlyown onlyon own assets only
Resolve/Reopen issuesown only
Create/update/delete commentson own assets only
Access the Workflow tab
Move data rows between steps
Request labeling services

​
Custom roles

For more granular control, Enterprise customers can create up to five custom project-level roles. To create a custom role:
  1. On the Workspace settings page, select User Roles.
  2. Click + Create User Role.
  3. Select the specific permissions for this role.
  4. Add a name and description, then click Create.
Admins can define custom roles at project level by selecting from the following permissions:
CategoryPermission
AdminAdd new members to the organization
Access and interact with the API
Cancel ongoing tasks
Create new API keys for accessing services
Delete members from an org
Manage webhooks for the system
Modify the membership of projects or organizations
Modify organizational membership details
Modify the organization’s profile
Refresh organization entitlements
Remove members from projects or organizations
View performance metrics
View project or organization members
View project settings
View user groups
Manage workspaces within the system
AnnotateClear all reservations made within the system
Create new batches for processing data
Create new benchmarks for performance evaluation
Create export tasks for data
Create comments on issues
Create new labels for data
Create prediction tasks or models
Create new projects
Create updates for projects
Create reviews for tasks or projects
Delete benchmarks
Delete labels
Delete a project
Detach datasets from projects or tasks
Manage data collections
Manage categories for issues
Change the status of issues
Modify ontologies
Modify the consensus settings of a project
Modify project settings
Change the status of projects
Modify the workflow of projects
View all labels within the system
View benchmarks
View custom metadata
View ontologies
View comments on issues made by others
View labels created by other users
View your own comments on issues
View labels created by you
View your own performance metrics
View project details
View project consensus settings
View datasets associated with a project
View external organizations associated with a project
View the project’s labeling interface
View the workflow of projects
View the reporting dashboard
View the schema tab
View webhooks
Clear your own reservations within the system
CatalogCreate new datasets within the system
Create IAM (Identity and Access Management) integrations
Create slices of data for analysis
Delete individual data rows
Delete datasets from the system
Delete IAM (Identity and Access Management) integrations
Modify batches of data rows
Modify datasets within the system
Modify IAM integrations
Upload files to the system
View batches of data
View the data catalog
View datasets within the system
ModelDelete model diagnostics
Delete prediction tasks or models
Manage model configurations
Modify model diagnostics
View model diagnostics

​
Workforce provider roles

When using an external labeling service, their team members are granted special roles with limited permissions. They can only see the labels created by their own team, ensuring your internal work remains private.
PermissionWorkforce adminWorkforce team managerWorkforce reviewerWorkforce labeler
Import data/create new datasets
Attach a dataset to a project
Detach a dataset from a project
Add/edit/delete projects
Invite new members to an organization
Add/modify existing org members on a project
Create/modify labels (own only)
Review/modify others’ labels
Delete labels
View own & team’s performance metrics
Create an export (own only) (own only)