Roles and Permissions

Roles

There are two types of roles:

1. Organization Roles
2. Membership Roles

Roles Overview

Key Definitions

• Organization: A container that manages users, workspaces, and permissions.
• Workspace: An environment within an organization where projects are created and maintained.
• Project: A unit of work within a workspace that contains data, configurations, and workflows.

Role Hierarchy Diagram

Organization Roles
├── Owner
│   ├── Admin
│   │   └── Member
│   │       ├── Moderator
│   │       │   ├── Editor
│   │       │   │   └── Viewer
│   │       │   └── Viewer
│   │       ├── Editor
│   │       │   └── Viewer
│   │       └── Viewer
│   └── Member
│       ├── Moderator
│       │   ├── Editor
│       │   │   └── Viewer
│       │   └── Viewer
│       ├── Editor
│       │   └── Viewer
│       └── Viewer
└── Admin
    └── Member
        ├── Moderator
        │   ├── Editor
        │   │   └── Viewer
        │   └── Viewer
        ├── Editor
        │   └── Viewer
        └── Viewer

Organization Roles:

• Owner
• Admin
• Member

Membership Roles:

• Moderator
• Editor
• Viewer

Organization Roles

Organizations have workspaces. Workspaces are areas where Members can create new projects or access existing projects within the workspace.

The organization has three roles:

• Owner: The user who created the organization. Has full permissions, including adding or removing Admins and deleting the organization.
• Admin: Has all the permissions of an Owner except deleting the organization. Only the Owner can assign Admin roles. Multiple Admins are allowed.
• Member: A user added by the Owner or an Admin. Members can only view organizational workspaces.

Membership Roles

Permission Matrix

Role	Create Workspace	View All Workspaces	Add Members	Assign Roles	Delete Workspace	Delete Org
Owner	✅	✅	✅	All roles	✅	✅
Admin	✅	✅	✅	Moderator, Editor, Viewer	✅	❌
Member	❌	✅ (Org WS only)	❌	❌	❌	❌
Moderator	✅	✅ (Own WS only)	❌	Editor, Viewer	❌	❌
Editor	❌	✅ (Assigned WS)	❌	Viewer	❌	❌
Viewer	❌	✅ (Assigned WS)	❌	❌	❌	❌

Membership roles apply to Members and include:

• Moderator: Can create new workspaces and view only those workspaces created by themselves. Multiple Moderators can be assigned to a single workspace. Owners or Admins assign Moderators to existing workspaces (excluding organizational workspaces). Only Owners or Admins can assign the Moderator role.
• Editor: Has all Moderator permissions except assigning new Editors or deleting workspaces. Owners, Admins, or Moderators can assign the Editor role to Members.
• Viewer: Can only view workspace details, including projects and their configurations. Owners, Admins, Moderators, or Editors can assign the Viewer role to Members. Owners and Admins can also directly assign the Viewer role to Members.