Summary and recommendation
Sketch user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.
Sketch is a Mac-only design tool built around a Workspace model with three fixed roles: Admin, Member (Editor), and Viewer.
Viewers are free and unlimited on all plans.
Editor seats are paid, and the plan tier determines which access-control features are available - SSO requires Business or above, and SCIM provisioning is exclusive to Enterprise.
Quick facts
| Admin console path | Workspace Settings → Members |
| Admin console URL | Official docs |
| SCIM available | Yes |
| SCIM tier required | Enterprise |
| SSO prerequisite | Yes |
User types and roles
| Role | Permissions | Cannot do | Plan required | Seat cost | Watch out for |
|---|---|---|---|---|---|
| Workspace Admin | Full control over Workspace settings, billing, member management, SSO/SCIM configuration, and all Projects and documents within the Workspace. | Cannot act as a different member's identity; cannot downgrade their own role without another Admin present. | Standard (any paid plan) | $9/editor/mo (Standard) or $20/editor/mo (Business) or $44/editor/mo (Enterprise) | At least one Admin must remain in the Workspace at all times; the last Admin cannot remove themselves. |
| Member (Editor) | Can create, edit, and share documents and Projects within the Workspace. Can invite Viewers to specific documents. | Cannot access Workspace billing, SSO/SCIM settings, or manage other members' roles. | Standard (any paid plan) | $9/editor/mo (Standard) or $20/editor/mo (Business) or $44/editor/mo (Enterprise) | Each Editor occupies a paid seat. Changing a Member to Viewer frees the paid seat. |
| Viewer | Can view and comment on documents they have been granted access to. Can inspect designs in the web app. | Cannot edit documents, create Projects, or access Workspace admin settings. | All plans including Free | $0 – Viewers are free and unlimited on all plans. | Viewers must be explicitly invited to individual documents or Projects; they do not automatically see all Workspace content. |
Permission model
- Model type: role-based
- Description: Sketch uses three fixed Workspace-level roles (Admin, Member/Editor, Viewer). Permissions are predefined per role and cannot be customized. Document- and Project-level sharing provides additional access control but does not create new roles.
- Custom roles: No
- Custom roles plan: Not documented
- Granularity: Workspace-level roles with document/Project-level sharing controls. No field-level or custom permission sets.
How to add users
- Sign in to sketch.com and open your Workspace.
- Navigate to Workspace Settings → Members.
- Click 'Invite Members'.
- Enter the email address(es) of the person(s) to invite.
- Select the role to assign: Admin, Member, or Viewer.
- Click 'Send Invite'. The invitee receives an email and must accept to join.
Required fields: Email address, Role (Admin, Member, or Viewer)
Watch out for:
- Inviting a new Editor immediately adds a billable seat; billing is prorated for mid-cycle additions.
- Invitees must have or create a Sketch account to accept the invitation.
- SSO-enforced Workspaces (Business/Enterprise) require the invitee to authenticate via the configured IdP before gaining access.
- Pending invitations still count toward seat usage on some plan configurations; verify in billing before sending bulk invites.
| Bulk option | Availability | Notes |
|---|---|---|
| CSV import | No | Not documented |
| Domain whitelisting | No | Automatic domain-based user add |
| IdP provisioning | Yes | Enterprise |
How to remove or deactivate users
- Can delete users: Yes
- Delete/deactivate behavior: Admins can remove (delete) a member from the Workspace via Workspace Settings → Members. Removal revokes access immediately. Sketch does not offer a separate 'deactivate/suspend' state distinct from removal in the standard UI; SCIM deprovisioning on Enterprise plans can suspend/deprovision users via the IdP.
- Sign in to sketch.com and open your Workspace.
- Go to Workspace Settings → Members.
- Locate the member to remove.
- Click the '…' (more options) menu next to their name.
- Select 'Remove from Workspace'.
- Confirm the removal in the dialog.
| Data impact | Behavior |
|---|---|
| Owned records | Documents created by the removed member remain in the Workspace and are accessible to Admins. Ownership does not automatically transfer. |
| Shared content | Projects and documents the removed member was collaborating on remain intact and accessible to other members with existing permissions. |
| Integrations | Any personal API tokens or integrations set up by the removed member may stop functioning; Admins should audit integrations after removal. |
| License freed | Removing an Editor frees the paid seat immediately; the seat count and billing adjust at the next billing cycle or prorated depending on plan terms. |
Watch out for:
- Removing a member does not delete their documents from the Workspace; an Admin must manually reassign or archive orphaned content.
- On Enterprise with SCIM, deprovisioning via the IdP is the recommended method and will automatically remove the user from the Workspace.
- If SSO is enforced, a removed user who still has an active IdP session may need to be deprovisioned at the IdP level to fully block access.
License and seat management
| Seat type | Includes | Cost |
|---|---|---|
| Editor seat (Member or Admin) | Full document creation and editing access within the Workspace. | $9/editor/mo (Standard), $20/editor/mo (Business), $44/editor/mo (Enterprise), $74/editor/mo (Private Cloud) |
| Viewer seat | View and comment access to shared documents; no editing capability. | $0 – unlimited and free on all plans |
- Where to check usage: Workspace Settings → Members (shows current member list and roles); Workspace Settings → Billing (shows seat count and upcoming invoice).
- How to identify unused seats: Sketch does not provide a built-in last-active or login-date column in the Members list as of available documentation. Admins must cross-reference member activity manually or via IdP logs (Enterprise/SCIM).
- Billing notes: Billing is per Editor seat per month. Viewers are always free and unlimited. Annual plans are available at a discount. Non-profit and education discounts exist; contact Sketch sales. Business plan ($20/editor/mo) adds SSO. Enterprise plan ($44/editor/mo) adds SCIM and BYOK. Private Cloud is $74/editor/mo.
The cost of manual management
Without SCIM, every app that connects to Sketch for identity management relies entirely on an Admin manually working through Workspace Settings → Members. Sketch provides no built-in last-active or login-date column, so identifying unused Editor seats requires cross-referencing IdP logs or guesswork.
Pending invitations can consume billable seats before a user accepts, creating billing surprises at scale. Orphaned documents after member removal must also be manually reassigned - there is no automated content handoff.
What IT admins are saying
Community evidence is not specific enough to quote or summarize yet for this app.
The decision
Sketch fits teams that are Mac-native, design-led, and already invested in the Sketch ecosystem. The free Viewer tier removes friction for stakeholders who only need to inspect or comment.
Teams that need automated provisioning must commit to the Enterprise plan ($44/editor/mo) for SCIM - the Business plan ($20/editor/mo) adds SSO but stops short of lifecycle automation. Organizations on Standard ($9/editor/mo) are fully manual and should weigh the operational overhead of managing every app access change by hand against the cost delta to upgrade.
Bottom line
Sketch's permission model is straightforward but inflexible: three fixed roles, no custom permission sets, and no granular field-level controls.
Manual administration is workable for small, stable teams but becomes a liability as headcount grows - the absence of usage analytics and the Mac-only editing constraint make seat hygiene genuinely difficult.
Teams that need reliable, auditable user lifecycle management should treat the Enterprise plan and SCIM configuration as a prerequisite, not an upgrade.
Automate Sketch workflows without one-off scripts
Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.
