Webflow User Management Overview | OpsBlu Docs

Webflow User Management Overview

Understand Webflow workspace and site permissions, user roles, and access management for teams and collaborators.

Effective user management in Webflow ensures team members have appropriate access to design, publish, and manage your websites while maintaining security and governance. This guide explains Webflow's permission model and access management.

Webflow's Two-Level Permission System

Webflow uses a two-tier permission system:

1. Workspace Level

Workspaces are top-level containers for your Webflow sites and team members:

  • Contain multiple sites/projects
  • Manage billing and plans
  • Control workspace-level team access
  • Share resources across sites

2. Site Level

Sites are individual projects within a workspace:

  • Specific to one website
  • Independent permission settings
  • Can have different collaborators than workspace
  • Inherit workspace member access (with site-specific roles)

Permission Hierarchy

Workspace Owner
  └─ Workspace Admin
      └─ Site-Specific Roles
          ├─ Designer
          ├─ Content Editor
          └─ Billing Manager

Workspace Roles

Workspace Owner

Full control over workspace:

  • Access: All sites and workspace settings
  • Capabilities:
    • Add/remove workspace members
    • Delete workspace
    • Manage billing and plans
    • Transfer workspace ownership
    • Full site access across all projects
  • Limitations: Only one owner per workspace
  • Best for: Primary account holder, business owner

Workspace Admin (Team Plans)

Administrative access without ownership:

  • Access: All sites in workspace
  • Capabilities:
    • Add/remove workspace members (except owner)
    • Manage workspace settings
    • Full site access across all projects
    • Cannot delete workspace
    • Cannot transfer ownership
  • Limitations: Available on Team and higher plans
  • Best for: Lead designer, technical director, agency owner

Site Roles

Designer

Full design and development access:

  • Access: Complete site editing in Designer
  • Capabilities:
    • Edit all pages and components
    • Modify styles and interactions
    • Add/edit custom code
    • Configure site settings
    • Publish to staging
    • Manage CMS collections
    • Add/remove site collaborators (if permitted)
  • Cannot:
    • Delete site
    • Manage workspace billing
    • Transfer site ownership
  • Best for: Web designers, developers, agencies

Content Editor (CMS Editor)

Content-only access via Webflow Editor:

  • Access: Webflow Editor (not Designer)
  • Capabilities:
    • Edit CMS collection items
    • Edit static page content
    • Upload images and media
    • Publish content changes
    • Cannot change design or structure
  • Cannot:
    • Access Webflow Designer
    • Modify site structure
    • Edit styles or interactions
    • Access site settings
  • Best for: Content managers, marketers, blog writers

Billing Manager

Financial management access:

  • Access: Workspace billing only
  • Capabilities:
    • View and manage billing
    • Update payment methods
    • View invoices
    • Manage plan upgrades/downgrades
  • Cannot:
    • Access Designer or Editor
    • Edit sites
    • Manage team members
  • Best for: Finance team, accountants, business managers

Site Plans and Access Limitations

Access control varies by Webflow plan:

Starter/Basic Site Plans

  • Workspace members: Unlimited
  • Site collaborators: Limited to workspace members
  • CMS Editors: Not available
  • Publishing: Workspace members can publish

CMS Site Plan

  • Workspace members: Unlimited
  • Site collaborators: Workspace members + invited guests
  • CMS Editors: Up to 3 (included)
  • Publishing: Workspace members + CMS Editors can publish

Business Site Plan

  • Workspace members: Unlimited
  • Site collaborators: Workspace members + invited guests
  • CMS Editors: Up to 10 (included)
  • Advanced permissions: Site-specific role assignments
  • Publishing: Controlled by permissions

Enterprise Plan

  • Custom limits: Negotiable based on needs
  • SSO/SAML: Single Sign-On available
  • Advanced security: IP allowlisting, 2FA enforcement
  • Dedicated support: Priority support and success manager

Webflow Team Plan (Workspace-Level)

Team plan adds workspace-level features:

  • Workspace Admins: Multiple admins
  • Shared components: Component Library across sites
  • Centralized billing: One bill for all sites
  • Team collaboration: Enhanced team features
  • User management: Advanced access controls

Permission Matrix

Capability Workspace Owner Workspace Admin Designer CMS Editor Billing Manager
Delete workspace ✓ ✗ ✗ ✗ ✗
Manage workspace billing ✓ ✓ ✗ ✗ ✓
Add/remove workspace members ✓ ✓ ✗ ✗ ✗
Access all sites ✓ ✓ Site-specific Site-specific ✗
Full Designer access ✓ ✓ ✓ ✗ ✗
Edit site content ✓ ✓ ✓ ✓ ✗
Publish site ✓ ✓ ✓ ✓ ✗
Manage custom code ✓ ✓ ✓ ✗ ✗
Delete site ✓ ✓ ✗ ✗ ✗
Transfer site ✓ ✓ ✗ ✗ ✗

Guest Collaborators

Invite external collaborators without workspace access:

  • How it works: Invite via email to specific site only
  • Access: Site-level only (no workspace access)
  • Roles: Designer or CMS Editor
  • Billing: May count toward seat limits based on plan
  • Best for: Freelancers, clients, temporary contractors

Adding Guest Collaborators

  1. Open site in Webflow Designer
  2. Click Share icon (top-right)
  3. Click Invite people to edit this site
  4. Enter email address
  5. Select role (Designer or CMS Editor)
  6. Send invitation
  7. Recipient accepts via email

Webflow Editor Access

The Webflow Editor is a content-only interface:

Who Can Access Editor

  • CMS Editors: Primary use case
  • Designers: Can access but typically use Designer
  • Workspace Admins: Can access all sites' Editors
  • Workspace Owner: Can access all sites' Editors

Editor Capabilities

  • ✓ Edit CMS collection items
  • ✓ Edit static page text
  • ✓ Upload and replace images
  • ✓ Publish changes
  • ✗ Edit structure or layout
  • ✗ Modify styles or design
  • ✗ Add new pages or collections
  • ✗ Access site settings

Editor URL

Each site has a unique Editor URL:

https://preview.webflow.com/preview/[site-name]?locale=en&preview=[preview-id]

Share this URL with CMS Editors for content access.

Security and Compliance

Two-Factor Authentication (2FA)

Enable 2FA for all workspace members:

  1. Go to Account Settings (personal, not workspace)
  2. Navigate to Security
  3. Enable Two-Factor Authentication
  4. Use authenticator app (Google Authenticator, Authy)

Best practice: Require 2FA for all team members with Designer or Admin access.

Single Sign-On (SSO)

Available on Enterprise plans:

  • SAML 2.0: Industry-standard SSO
  • Providers: Okta, Azure AD, Google, OneLogin, Auth0
  • Benefits: Centralized authentication, enhanced security
  • Use case: Large teams, enterprise security requirements

IP Allowlisting

Enterprise feature: Restrict access by IP address:

  • Configuration: Contact Webflow support
  • Use case: Restrict Designer access to office IPs
  • Benefit: Prevent unauthorized access from unknown locations

Access Management Best Practices

1. Principle of Least Privilege

  • Grant minimum necessary access
  • Use CMS Editor for content-only users
  • Reserve Designer access for actual designers/developers
  • Limit Workspace Admin to essential personnel

2. Regular Access Reviews

  • Quarterly reviews: Audit workspace and site members
  • Remove stale accounts: Offboard former employees promptly
  • Update roles: Adjust permissions as responsibilities change
  • Document ownership: Maintain record of who has what access

3. Onboarding Process

When adding new team members:

  1. Determine necessary access level
  2. Add to workspace (if internal team) or invite as guest
  3. Assign site-specific roles
  4. Provide onboarding documentation
  5. Enable 2FA requirement
  6. Document access grant in records

4. Offboarding Process

When removing team members:

  1. Remove from workspace (or all sites if guest)
  2. Transfer ownership of any assets they created
  3. Update shared credentials they had access to
  4. Document removal in access records
  5. Review for any orphaned resources

5. Workspace Organization

  • Multiple workspaces: Separate client work from internal projects
  • Clear naming: Use consistent workspace and site names
  • Billing separation: Different workspaces for different budgets/clients
  • Team segmentation: Different teams in different workspaces if needed

Common Access Scenarios

Scenario: Agency Managing Client Sites

Structure:

  • Agency workspace: Contains all client sites
  • Agency team: Workspace Admins/Designers
  • Clients: Guest CMS Editors on their specific site
  • Benefits: Centralized management, client content access

Scenario: In-House Marketing Team

Structure:

  • Company workspace: Single workspace for company
  • Developers: Designers role
  • Marketing team: CMS Editors
  • Finance: Billing Manager
  • Benefits: Clear role separation, content independence

Scenario: Freelance Designer with Clients

Structure:

  • Option 1: Client owns workspace, designer is guest
  • Option 2: Designer owns workspace, transfers to client after completion
  • Recommendation: Option 2 for ongoing maintenance, Option 1 for one-time projects

Transferring Sites and Workspaces

Transferring Sites

Move site to different workspace:

  1. Must be Workspace Owner or Admin
  2. Go to Site Settings > General
  3. Click Transfer site
  4. Enter recipient's email
  5. Recipient accepts transfer
  6. Site moves to their workspace

Use cases:

  • Delivering completed site to client
  • Moving site between company workspaces
  • Consolidating sites under one workspace

Transferring Workspace Ownership

Change workspace owner:

  1. Must be current Workspace Owner
  2. Go to Workspace Settings > Team
  3. Find new owner in member list
  4. Click Transfer ownership
  5. Confirm transfer
  6. New owner accepts

Use cases:

  • Employee change
  • Business ownership change
  • Account consolidation

Troubleshooting Access Issues

Issue: User Can't Access Site

Possible causes:

  1. Not invited: User not added to workspace or site
  2. Wrong role: Has Billing Manager but needs Designer
  3. Email mismatch: Invited to different email than they use
  4. Pending invitation: User hasn't accepted invite

Solutions:

  • Verify user is in workspace or site member list
  • Check role assignment matches needed access
  • Resend invitation to correct email
  • Check user's email spam folder for invitation

Issue: User Can't Publish

Possible causes:

  1. Site not published: Site has never been published
  2. Plan limitation: Requires paid site plan to publish
  3. Role restriction: Some custom roles can't publish
  4. Technical issue: Browser or connectivity problem

Solutions:

  • Ensure site is on paid plan
  • Verify user has Designer or CMS Editor role
  • Check site settings for publishing restrictions
  • Try different browser or clear cache

Issue: Too Many Seat Limits

Problem: Reached maximum CMS Editors or collaborators.

Solutions:

  • Remove inactive CMS Editors
  • Upgrade to plan with higher limits (Business plan)
  • Use workspace members instead of guests (if applicable)
  • Rotate access for temporary team members

Next Steps

Additional Resources

Back to top