Roles

Each person in a workspace has one of four roles; this page shows what each can do by default.

The full role definitions and permission matrix (organization, workspace and resource roles) are in the Permissions reference.

Default permissions by role

Permission	Viewer	Member	Admin	Owner
Read the workspace’s items	Yes	Yes	Yes	Yes
See who is in the workspace	Yes	Yes	Yes	Yes
Create and edit items		Yes	Yes	Yes
Start tasks and runs		Yes	Yes	Yes
Delete items			Yes	Yes
Add and remove members, change roles			Yes	Yes
Change workspace settings and sharing			Yes	Yes
Change roles and security settings			Yes	Yes
Approve an action an agent paused on			Yes	Yes

Change the defaults

The organization owner sets these defaults for every workspace, in Settings > Organization > Roles (Workspace defaults tab). A workspace admin can change them for one workspace, in Workspace settings > Roles. The workspace Owner always has every permission.

On organizations that use the newer permissions system, a role moves as a whole step (see, then create, edit and run, then manage members and settings). Two permissions are fixed there: only the workspace owner can delete, whatever the role says, and approving an agent’s waiting action is decided by who manages that agent, not by the workspace role.