## Internal user roles

Understand internal user roles and permissions

### Overview  
  
Internal users are team members that are part of your workspace. We recommend that you give every team member their own internal user account for enhanced permissions and to minimize issues that may arise if there are multiple simultaneous sessions with the same internal user.

### Roles  
  
Internal users can be assigned one of two roles: **Admin** or **Staff**.  
The primary difference is that **Admin internal users** have access to workspace settings, configuration options, and billing functionality.

#### Admin Internal Users  
  
Admins have full system access and can:

- Access all settings, including domain settings, payout account settings, API settings, customization, and plan settings
- Invite and manage other internal users
- Configure client access for internal users
- Configure Assembly (core) Apps, Embeds, Marketplace Apps, and Custom Apps
- Access the Payments App, invoices, products, and Billing tabs on client CRM profiles
- Access QuickBooks and Xero integrations

#### Staff Internal Users  
  
Staff users have limited permissions and cannot access administrative settings or billing functionality.  
When a user is assigned the **Staff** role:

- Workspace settings (domain, payouts, API, customization, and plan settings) are hidden
- Internal user management and app configuration are not available
- The Payments App, invoices, products, and Billing tabs on client CRM profiles are not accessible
- QuickBooks and Xero integrations are hidden
- Billing-related notifications are turned off

### Adding an internal user  
  
1. Navigate to the [_Settings > Team_](https://dashboard.assembly.com/settings/members) page.
2. Click on the _Invite user_ button.
3. Enter the internal user's name, email, and role.
4. Click _Invite_.
5. The invited internal user will now receive an email to accept their invitation.

### Removing an internal user  
  
1. Navigate to the [_Settings > Team_](https://dashboard.assembly.com/settings/members) page.
2. Click on the ellipses(...) shown on the far right of the internal user.
3. Click _Delete_.

2. [Overview](/content/guide/internal-user-roles#overview/index.html)  
3. [Roles](/content/guide/internal-user-roles#roles/index.html)  
4. [Admin Internal Users](/content/guide/internal-user-roles#roles-admin-internal-users/index.html)  
5. [Staff Internal Users](/content/guide/internal-user-roles#roles-staff-internal-users/index.html)  
6. [Adding an internal user](/content/guide/internal-user-roles#adding-an-internal-user/index.html)  
7. [Removing an internal user](/content/guide/internal-user-roles#removing-an-internal-user/index.html)