How account roles work in MangoMap
Understand the four account roles, how a role and an access group combine, and which actions are limited to the creator or owner.
Every user in a MangoMap account has exactly one account role: Viewer, Editor, Admin, or Owner. The role decides what kinds of actions they can take in principle. Access groups decide which specific maps and datasets each action applies to. Both have to agree before a user can edit, share, or delete anything they didn’t create.
This page explains the model. For the full “who can do what” matrix, see Account roles reference.
The four roles
Roles form an order. Each role includes the rights of the role below it, plus more.
| Role | One-line summary |
|---|---|
Viewer |
Sees the maps and datasets that have been shared with them. Cannot edit anything. |
Editor |
Sees and edits the data behind any map or dataset shared with them through a group with Edit access. Cannot edit map configuration; cannot create new maps or datasets. |
Admin |
Everything Editor can do, plus: edit map configuration, create new maps and datasets, import data, and delete datasets shared with them through a group with Edit access. Cannot delete a map they didn’t create, manage the team, customise the account, or change billing. |
Owner |
Everything Admin can do, plus: invite, update, and remove users; create, edit, and delete access groups; customise the account; manage subscription and billing. There is one owner per account. |
The hierarchy is Viewer < Editor < Admin < Owner.
Two checks: role and group
For most actions, MangoMap checks two questions:
- Does the user’s role allow this kind of action? This is the category-level check.
Viewercan never edit;Editorcan edit but not configure;Admincan do almost anything except owner-only tasks. - Does the user have the right access on this specific map or dataset? This is the item-level check. A user gets item access by being in an access group that has
VieworEditenabled for the map or dataset, or by being its creator, or by being the account owner.
Both checks must pass. An Editor who is not in any group with Edit access to a particular dataset cannot edit that dataset, even though the role allows editing in principle. A Viewer in a group with Edit access to a dataset still cannot edit it, because the role rules out editing.
The role only matters for actions that change something. View access doesn’t depend on the role: anyone in a group with View access can see the map or dataset, no matter their role.
Deleting is stricter than editing. Only the creator or the account owner can delete a map. To delete a dataset that they didn’t create, a user needs the Admin role and a group with Edit access.
To check what one user can do with one map or dataset, follow the questions in order:
The creator override
The user who created a map or dataset always has full rights to it. Creating an item gives the creator all four actions (view, edit, share, delete) on that one item, regardless of their role or which groups they are in.
The creator override only applies to the specific item the user created — it does not promote them across the account or change their role.
The owner override
The account owner has full rights to everything in the account. Every map, every dataset, every action — view, edit, share, delete. Only the owner can open the team, customisation, and subscription pages.
There is one owner per account. The role cannot be transferred from any in-product surface; the team invite and update forms do not list Owner as a choice. Those forms offer Admin, Editor, and Viewer. If you need to transfer ownership, ask support.
Why editing a map needs Admin but editing a dataset needs only Editor
The two actions affect different things:
- Editing a dataset changes the underlying data — feature attributes, geometry, the file behind the dataset, sync settings. This is content work that an
Editoris expected to do day-to-day. - Editing a map changes how that data is presented — layer order, styles, popups, basemap, configuration, extensions. Map settings affect everyone who can view the map, including the public. The
Adminthreshold makes map configuration an admin-level decision.
This means an Editor in a group with Edit access on both a map and a dataset can edit the dataset’s content but cannot rearrange or restyle the map that uses it. To grant both abilities, raise the user to Admin.
Why team, customisation, and subscription are owner-only
The team page, the customisation menu, and the subscription and billing pages are restricted to the account owner. These surfaces don’t have item-level group access — they’re account-wide settings. Only the owner can change billing, add users, or change the account’s public settings.
Admin users can do almost everything else MangoMap offers. They can create maps and datasets, edit and delete datasets shared with them through a group with Edit access, and edit maps shared the same way. Only the creator or the owner can delete a map. But they cannot invite a teammate, change a colour, or update a billing card.
Roles vs. seats
Each role consumes a seat on your subscription differently. Admin and Editor count toward paid seats; Viewer does not. Inviting a user as Viewer is the no-cost option when someone only needs to read.
See Users page for the form layout and How to invite a user for the workflow.