Last updated: 2026-04-06
Guide
User Roles & Access Control¶
Role-based access control for privacy teams. Assign team members appropriate access levels within your Dxtra organizations.
How Roles Work¶
Dxtra uses organization-level role assignments:
- Per-Organization: Users are assigned roles within specific data controller organizations
- Multi-Org Support: A user can have different roles in different organizations
- Immediate Effect: Permission changes apply immediately across the platform
Available Roles¶
Dxtra provides nine predefined roles:
| Role | Description |
|---|---|
| Owner | Full platform control including billing |
| Business Owner | Platform oversight with billing access |
| Data Protection Officer | Compliance oversight and DPIAs |
| Data Controller | Define processing purposes |
| Role | Description |
|---|---|
| Admin | Day-to-day management without billing |
| Agency/Reseller | Multi-client management |
| Role | Description |
|---|---|
| Developer | API access and integrations |
| Member | Basic operational access |
| Role | Description |
|---|---|
| Auditor/Regulator | Read-only compliance verification |
Quick Start¶
Add Your First Team Member¶
- Go to Settings > Users & Roles
- Click Invite User
- Enter email and select role
- User receives invitation email
Common Role Assignments¶
| Team Function | Recommended Role |
|---|---|
| Privacy Director | Owner |
| Privacy Manager | Admin |
| DPO | Data Protection Officer |
| Privacy Analyst | Member |
| Developer | Developer |
| External Auditor | Auditor/Regulator |
Security Best Practices¶
- Least Privilege: Start with the minimum role needed
- Review Access: Check user roles quarterly
- Prompt Removal: Remove access when team members leave
- Document Assignments: Record why users have elevated roles