Roles and permissions
Access works on two layers. Your organisation role says what you can do to
the account; your workspace role says what you can do inside one workspace. They
are set separately, and the workspace one is what governs day-to-day work.
Your organisation role
| Role | What it means |
|---|---|
| User | The default. Works inside the workspaces they have been added to. |
| OrgAdmin | Runs the organisation: people, licences, subscription, datasources and gateways. Sees every workspace in the organisation. |
Your role in a workspace
Set per workspace, from Workspace Members.
| Capability | Viewer | Editor | Admin |
|---|---|---|---|
| See the workspace | Yes | Yes | Yes |
| Open and read reports | Yes | Yes | Yes |
| Ask the assistant a question | Yes | Yes | Yes |
| Subscribe to a report | Yes | Yes | Yes |
| Edit reports and build charts | — | Yes | Yes |
| Publish a report | — | Yes | Yes |
| Add or change datasources | — | — | Yes |
| Add and remove members | — | — | Yes |
| Delete the workspace | — | — | Yes |
The person who created a workspace is its owner and always counts as Admin
there. An OrgAdmin has Admin rights in every workspace in the organisation
without being added to each one.
What this means in practice
- If the View / Edit toggle is missing on a report, you are a Viewer in that
workspace. Ask an Admin for Editor access. - Being an Editor in one workspace grants you nothing in another.
- Everyone manages their own report subscriptions; an OrgAdmin can see all of
them. - A licence is separate from a role. A licence is what your organisation buys
and assigns to a person; a role is what that person may do once they have one.
Related: Subscription, plans and billing