IN 30 SECONDSFull read: 3 min
- Every team has three core roles: owner, member and guest.
- Give every team at least one owner, ideally two, so it is never stranded.
- Real permissions combine the team role with which channels a person belongs to.
Why roles matter#
Microsoft Teams works on a simple idea. Not everyone in a team should be able to do everything. The person who created the team should not have the same powers as a contractor invited for a two week project. Roles are how Teams draws those lines.
Get roles right and your teams stay secure and easy to manage. Get them wrong, with every member set as an owner or guests given free rein, and you have built exactly the kind of sprawl and risk that is hard to unwind later. There are three core roles in every team: owner, member and guest. Here is what each one can actually do.
The three core roles#
Owner: the manager#
Owners run the team. They control who is in, what settings apply, and when the team retires. Every team needs at least one owner, and ideally two, so the team is never left stranded if one person leaves.
Owners can:
- Add and remove members and guests
- Promote a member to owner, or step someone down
- Create, rename and delete channels
- Change team settings, picture and description
- Set channel level permissions, including who can post and who can mention everyone
- Manage apps, tabs and connectors
- Archive or delete the team
Member: the participant#
Members are the everyday users, the people doing the actual work in the team. They can collaborate fully but cannot reshape the team itself.
Members can:
- Read and post messages in channels
- Create and edit files
- Add standard channels, if owners allow it
- Add apps and tabs, if owners allow it
- Mention the team or channel, if owners allow it
Members cannot add or remove other people, delete channels, or change team wide settings. Notice how much of what a member can do depends on whether owners allow it. That is the owner's settings panel at work.
Guest: the outsider#
Guests are people from outside your organisation, such as a different company, a client or a partner, who have been invited into a specific team. They get a deliberately limited experience.
GUESTS CAN
- Participate in the channel conversations they are added to
- View and edit shared files
- Join meetings and chats within the team
GUESTS CANNOT
- See anything outside the teams they are invited to
- Access the global organisation directory
- Create teams
- Add or remove other members
Quick comparison#
Here is how the three roles stack up side by side.
| Capability | OWNER | MEMBER | GUEST |
|---|---|---|---|
| Post in channels | Yes | Yes | Yes |
| Create and edit files | Yes | Yes | Yes |
| Add or remove people | Yes | No | No |
| Create channels | Yes | Only if the owner allows it | No |
| Delete channels | Yes | No | No |
| Change team settings | Yes | No | No |
| Add apps and tabs | Yes | Only if the owner allows it | No |
| Archive or delete the team | Yes | No | No |
Post in channels
- Owner
- Yes
- Member
- Yes
- Guest
- Yes
Create and edit files
- Owner
- Yes
- Member
- Yes
- Guest
- Yes
Add or remove people
- Owner
- Yes
- Member
- No
- Guest
- No
Create channels
- Owner
- Yes
- Member
- Only if the owner allows it
- Guest
- No
Delete channels
- Owner
- Yes
- Member
- No
- Guest
- No
Change team settings
- Owner
- Yes
- Member
- No
- Guest
- No
Add apps and tabs
- Owner
- Yes
- Member
- Only if the owner allows it
- Guest
- No
Archive or delete the team
- Owner
- Yes
- Member
- No
- Guest
- No
Rows marked "only if the owner allows it" depend on settings the team owner controls, not on the member role itself.
A layer deeper: channel level permissions#
Roles apply to the whole team, but channels add their own nuances.
Standard channels#
Open to everyone in the team. Owners can restrict posting, for example limiting an announcements channel to owners only.
Private channels#
Open to a subset of the team's members. Private channels have their own owners and members, separate from the parent team. A team member who is not in the private channel cannot see it at all.
Shared channels#
Let you collaborate with people outside the team, even outside your organisation, without making them guests of the whole team. They see only that one channel.
Rather have us do it for you?
A free 15-minute call. We look at your tenant and tell you what to fix first.
Book a Free CallWRITTEN BY
MStack360 Team
The MStack360 team delivers Microsoft 365 migrations, security and Power Platform projects for businesses across North America, Europe, Australia and the Middle East.