Control who can access ChartPull, what they can do, and how to invite new team members. ChartPull uses a simple three-role system that covers everything from read-only access to full administrative control.
Every ChartPull user has exactly one role within their workspace. Roles determine what the user can see and do.
| Role | Who gets it | What they can do |
|---|---|---|
| super_admin | First person from your domain to sign up | Everything. Billing, SSO, user roles, settings, exports, AI features, integrations, API keys. Full control. |
| admin | Promoted by super_admin or another admin | Settings, exports, AI features, integrations, invite users, manage viewer roles. Cannot manage billing or SSO. |
| viewer | Everyone who joins after the first user | View the org chart, search employees, view employee details. Cannot export, use AI features, or change settings. |
One super_admin per workspace
There is exactly one super_admin per workspace — the first person from your Google Workspace domain to sign in to ChartPull. If you need to transfer the super_admin role (for example, if that person leaves the company), contact support@chartpull.com.| Capability | Viewer | Admin | Super Admin |
|---|---|---|---|
| View org chart | Yes | Yes | Yes |
| Search employees | Yes | Yes | Yes |
| View employee details | Yes | Yes | Yes |
| Export (CSV, PNG, PDF) | — | Yes | Yes |
| AI search and insights | — | Yes | Yes |
| AI reports and digest | — | Yes | Yes |
| Manage workspace settings | — | Yes | Yes |
| Invite users | — | Yes | Yes |
| Promote/demote viewers | — | Yes | Yes |
| Create API keys | — | Yes | Yes |
| Configure webhooks | — | Yes | Yes |
| Configure integrations | — | Yes | Yes |
| Manage billing and plan | — | — | Yes |
| Configure SSO / SAML | — | — | Yes |
| Transfer ownership | — | — | Yes |
Admins and the super_admin can invite other people from the same Google Workspace domain to use ChartPull. Invitees do not need to be Google Workspace admins — they just need a work email on the same domain.
Go to Admin > Users
Navigate to the User Management page from the admin sidebar.
Click "Invite User"
Enter the email address of the person you want to invite. They must be on the same Google Workspace domain (e.g. if you are admin@acme.com, you can only invite name@acme.com).
Choose a role
Select whether the new user should be a "viewer" (default) or "admin." You can always change their role later.
Send the invite
ChartPull sends an email invitation. The recipient clicks the link, signs in with their Google Workspace account, and immediately gains access to the org chart.
Invites expire after 7 days
Pending invitations expire after 7 days. If the recipient has not clicked the invite link within that time, the invite is automatically invalidated. You can resend the invitation from the Admin > Users page at any time.Bulk invites
If you need to invite more than a few people, you can enter multiple email addresses separated by commas in the invite form. All invitees will receive the same role.To give a viewer more permissions, go to Admin > Users, find the user, and click the role dropdown next to their name. Change it from “viewer” to “admin.” The change takes effect immediately — the user does not need to log out and back in.
Not every role can change every other role. Here are the rules:
All changes are logged
Every role change, invitation, and user removal is recorded in the audit log. The log entry includes who made the change, what the change was, and when it happened. Audit log entries cannot be modified or deleted by anyone.To remove someone from ChartPull entirely, go to Admin > Users, find the user, and click “Remove.” They will immediately lose access. If they try to sign in again, they will see a message saying they need an invitation.
Removing a user from ChartPull does not affect their Google Workspace account in any way. They still appear in the org chart as an employee — they just can no longer log in to ChartPull.