Wonderkind NEXT uses role-based access control (RBAC) with roles defined at three levels: Organization, Master Account, and Account. A user can hold different roles at different levels.
Role overview by level
Organization-level roles
Role | What they can do |
Organization Admin | Full access to all Master Accounts, Accounts, settings, and members across the entire organization |
Organization Viewer | Read-only access to all data across the organization; cannot create or modify anything |
Master Account-level roles
Role | What they can do |
Master Account Admin | Manage all child Accounts, members, billing credits, and integrations under this Master Account |
Master Account Member | View all child Accounts and their reports; cannot modify settings or manage members |
Account-level roles
Role | What they can do |
Account Admin | Full access within the Account: create/edit/delete campaigns, jobs, assets, manage team members, configure integrations, generate API keys |
Account Member | Create and edit campaigns and assets; manage jobs; cannot manage team members, integrations, or account settings |
Account Viewer | Read-only: view campaigns, reports, jobs, and assets; cannot create or modify |
Permission matrix
Action | Org Admin | MA Admin | Acct Admin | Acct Member | Acct Viewer |
Create/edit campaigns | ✓ | ✓ | ✓ | ✓ | — |
Publish campaigns | ✓ | ✓ | ✓ | ✓ | — |
Delete campaigns | ✓ | ✓ | ✓ | — | — |
Manage jobs | ✓ | ✓ | ✓ | ✓ | — |
Manage assets | ✓ | ✓ | ✓ | ✓ | — |
Manage automation rules | ✓ | ✓ | ✓ | ✓ | — |
Approve queue items | ✓ | ✓ | ✓ | ✓ | — |
View reports | ✓ | ✓ | ✓ | ✓ | ✓ |
Manage team members | ✓ | ✓ | ✓ | — | — |
Connect integrations | ✓ | ✓ | ✓ | — | — |
Manage account settings | ✓ | ✓ | ✓ | — | — |
Generate API keys | ✓ | ✓ | ✓ | — | — |
Manage billing/credits | ✓ | ✓ | — | — | — |
Create/delete accounts | ✓ | ✓ | — | — | — |
Manage org settings | ✓ | — | — | — | — |
Assigning roles
Account level
Click Team in the sidebar.
Click Invite member for new users, or click ⋯ → Change role for existing members.
Master Account level
Navigate to the Master Account.
Go to Settings → Members.
Invite or update roles.
Organization level
Navigate to your Organization.
Go to Settings → Members.
Multiple roles
A user can have roles at multiple levels simultaneously. For example:
Account Member in Account A (can create campaigns)
Account Viewer in Account B (can only view)
Master Account Admin for the parent Master Account (can manage both)
The most permissive role for a given Account applies.
Related articles
Inviting Your Team
Managing Accounts
Master Accounts & Billing