← All articles
BLOG

Owners, staff and watchers: who should see which license

· 3 min read

Giving everyone on a team the same access is the simplest way to set up a workspace, and it works fine right up until someone who only needed to see a renewal date discovers they can also change billing, remove a teammate, or delete a license. Roles exist so that trade-off never has to happen.

The idea isn’t to lock people out of things. It’s to match what someone can do to what they actually need to do, so the person renewing a license and the person paying for the account aren’t forced into the same permissions by default.

The roles

  • Owners handle billing, team membership and workspace settings — the decisions that affect the whole account.
  • Staff do the day-to-day work of keeping licenses renewed: adding records, uploading documents, confirming dates.
  • Watchers and supervisors can see status without owning the renewal themselves, useful for a manager who needs visibility but isn’t the one doing the paperwork.

Why a separate watcher role is useful

A supervisor who needs to know the moment something slips into “overdue” doesn’t necessarily need the ability to edit the record, upload a new document, or reassign who owns it. Watching status without the ability to change it keeps oversight separate from execution — the person checking the work isn’t the same permission level as the person doing it.

Nothing is left unassigned

A license with no one named on it defaults to the owners, so there’s never a record that genuinely belongs to nobody — even if it’s not where you meant to leave it long-term. That default matters most right after a license is imported in bulk or added quickly without stopping to assign it properly.

Sensitive changes ask twice

Changing team membership, billing or security settings — and deleting a license — all require a fresh two-factor code, even in a session that’s already signed in. It’s a small amount of deliberate friction on exactly the actions worth slowing down, the ones that are hard to undo or easy to regret if done by accident.

Setting roles up once, early

Roles are easiest to assign correctly when a workspace is first set up, before licenses have piled up unassigned or ended up with the wrong default owner. Going back later to fix roles after the fact is possible, but it’s a cleanup task — deciding them up front is just a decision.

A small team doesn’t mean no roles

Even a two- or three-person operation benefits from this — the owner handling billing and the field staff renewing licenses are already different jobs in practice, whether or not the software enforces the distinction. Setting roles up early means that distinction is already in place by the time the team grows and the difference starts to matter more.

How this differs from simply hiding a menu item

Roles here aren’t a matter of what buttons a person happens to see — a staff account genuinely can’t perform an owner-level action, even if they knew the exact steps to try. That’s a meaningful difference from a UI that just doesn’t show a link: it means the access boundary holds even for someone who knows exactly what they’d want to do if they could.

Where ContractorLicenseAlert fits

Teams and the directory

What happens when someone leaves the company

More on renewals

Put your next renewal on the radar.

Try everything free for 7 days. No card needed.

Then $39 a month, or $390 a year. Cancel whenever.