People and roles
Open Site settings → Sharing and access. People with access is one list: the owner, organization admins, teams (open one to see who is in it), people added directly and pending invitations, each marked with how they got access. One field adds a person by e-mail or a team by name. If they have no account yet they get an invitation (self-hosted: set TIDEMARK_INVITES=true); otherwise they need an account first, which administrators create under Account settings → Users.

| Role | Can do |
|---|---|
| Owner | Everything, including deleting the site. One per site, and it can't be changed or removed. |
| Admin | View stats, change settings, goals, shields, shared links and people |
| Viewer | View stats only |
Roles are per site. Someone can be a viewer on one site and an admin on another. A person with access in several ways (directly, through teams, as an organization admin) gets the strongest role. See Organizations and Teams.
Installation administrators#
An administrator manages users and installs updates. That is separate from site roles.
Registration#
Self-hosted installations keep registration closed. Set TIDEMARK_REGISTRATION=true to allow sign-ups. See Configuration.