Studio roles explained: Owner, Sender, and Auditor

Most permission systems make you read a chart the size of a tax form. Studio has three roles, and you can learn all of them in the next two minutes.

CyberSygn Studio roles are deliberately built to stay simple, because there are only three of them: Owner, Sender, and Auditor. You should never need a permission matrix to figure out who can do what, since most studios run on one Owner plus one or two Senders, while the Auditor role is reserved for someone who needs to see the contract history but should not be sending anything. This guide explains what each of the Studio roles can and cannot do, so you can match every teammate to the right access in seconds and keep your workspace running cleanly with sensible CyberSygn member permissions.

Owner: the person who runs the workspace

Owner is full administrative control, and this is the founder or principal, which usually means you. An Owner manages billing, the member list, workspace settings, branding, and webhooks, so they can do everything a Sender can do plus the entire admin layer on top. Most workspaces keep exactly one Owner, though some keep two for redundancy, so the team is never locked out if one person goes on vacation or leaves. Here is the key detail: Owner is the only role that can demote or remove other members, and that power stays at the top on purpose. Why does that matter? Because the person who pays the bill should be the person who controls access, and you never want a teammate quietly changing roles or removing the founder, so keeping that one capability Owner-only is a simple guardrail that prevents a great many awkward situations. If you are setting up a studio, start by deciding who holds Owner, which for most small teams is one clear answer. A quick word of caution rounds this out. Do not hand out Owner just to be generous, because every Owner can change billing and remove people, so grant it only to those who genuinely need to run the account and keep your circle of Owners small and trusted.

Sender: the person doing the signing work

Sender is the default role for your working teammates, the designers, consultants, and coaches who are actually getting contracts signed every day. A Sender can send documents, manage their own pending signers, and see every document in the workspace, and they can also download signed PDFs and audit certificates and apply your saved templates. Now here is the line they cannot cross: a Sender cannot change billing or workspace settings, and they cannot manage members, which is the whole point of clean team workspace roles, because your people get full sending power without ever touching the controls that keep the account safe. Think about what that means in practice, because a new consultant can run their entire client pipeline, send contracts, chase signatures, and pull certificates, all without any risk of changing your plan or removing a teammate. In other words, you hand out real responsibility while keeping the dangerous buttons out of reach, which is why Sender is the role most studios assign the most. One more advantage is worth noting: Senders can see the whole workspace, not just their own deals, and that visibility helps the team cover for each other, so when a client emails about a contract a teammate sent, any Sender can pull it up and answer.

Auditor and how the three Studio roles fit together

Auditor is the quietest role, and often the most useful one, because an Auditor gets read-only audit access that lets them see every signed document and every audit certificate in the workspace while remaining unable to send, modify, or manage anything at all. They can look, and only look. So who is this for? A bookkeeper, an accountant, or part-time legal counsel, meaning someone who needs to review your contract history but should never send a document themselves. Think of it as cheap insurance, because with clear workspace access control the wrong person never sends the wrong contract by accident, and your bookkeeper can confirm a deal closed without ever holding the power to send one. Here is the broader idea behind all three Studio roles: you give each person exactly the access their job needs and nothing more, which keeps the work fast and the account safe at the same time. Still unsure which role fits someone? Use this quick rule: if they run the business, make them an Owner; if they send contracts, make them a Sender; and if they only need to look, make them an Auditor. You are never stuck with your first guess either, because an Owner can change any role in two clicks, so start with your best guess, watch how the person works, and adjust. Match the role to what someone actually does, and you will almost never have to think about permissions again.