Team members on each plan
Your plan sets how many team members your workspace can have: 2 on Starter, 5 on Premium, 10 on Agency and 10 on Unlimited. Every plan includes team roles, approvals and two-factor authentication.
Choose the right role
Postocial has three built-in roles. As a rule of thumb:
| Role | A good fit for |
|---|---|
| Admin | People who run the workspace, such as the owner or a team lead |
| Member | People who create and schedule posts day to day |
| Viewer | People who need to see what's planned without changing it |
Give each person the least access their work needs. On the Team page, the Can approve column decides who may approve posts that need approval.
Create custom team roles
Need something between a member and an admin? Open Workspace Settings > Team and choose TEAM ROLES. A custom role picks permissions in groups such as Posting and Team, plus Inbox, Contacts, Automations and Broadcasts on Premium and higher plans (55 permissions in all). Assign it to a member, and it also decides their post approval, bulk posts and RSS access, and on Premium and higher plans their inbox access.
- Limit it to some channels. On Premium and higher plans, a role can cover only some messaging channels, so its members see and answer only those conversations and contacts. That suits a client team, or someone who handles only WhatsApp.
- Split the work. For example, on Premium and higher plans, let support agents reply and pause the bot, but leave broadcasts and automations to the people who plan them.
- Admins keep everything. Workspace admins always have every permission.
Invite a teammate
- Open your team settings. In your workspace, open the team area.
- Add the person. Invite them as a team member and choose their role.
- They join. They follow the invitation to join your workspace.
- Check their access. Ask them to open the calendar and confirm they can see and do what they need.
Turn on two-factor authentication
Two-factor authentication adds a second step when someone signs in, so a stolen password alone isn't enough. Each person turns it on for their own login:
- Open your account settings.
- Turn on two-factor authentication and follow the steps on screen.
- If you get backup codes, store them somewhere safe, such as a password manager.
Ask admins to turn it on first, since their accounts can change the most.
Share the work
- Approvals: make posts require approval before they go out.
- Inbox assignment: on Premium and higher plans, assign conversations to teammates and leave internal notes.
- Groups and tags: put each brand's profiles in a group under Workspace Settings > Groups, and tag posts, so everyone finds their work quickly.
- Clients: send a shared calendar link for approvals, or an invite link so clients connect their own profiles.
When someone leaves
- If they're an admin, check what they set up first. API keys they created stop working, and webhook endpoints they're responsible for pause, once they leave or lose the admin role. Create replacement keys as an admin who is staying, update your integrations, and take over their endpoints from each endpoint's edit form.
- Remove them from your workspace.
- If they could see other workspace API keys, create new keys and delete the old ones.
- Change any shared logins they knew, such as the email account behind a social profile.
AI assistants follow the same roles
When a teammate connects an AI assistant through Postocial's MCP server, the assistant signs in as them and can only do what their role allows. About the MCP server.