Roles & Permissions
The platform uses role-based access control (RBAC) with four roles. Each role grants a specific set of permissions.
Roles
Owner
Full access plus team-level destructive actions. There is exactly one Owner per team — the person who created it. Ownership can be transferred to another member.
- Everything an Admin can do, plus:
- Transfer team ownership to another member
- Delete the team (irreversible)
Admin
Full operational access including team management.
- Create, edit, and delete workflows
- Run and monitor executions
- Create, edit, and delete connections
- Manage team members and settings
- Invite new members and resend invitations
Editor
Can create and modify workflows but cannot manage connections, dashboards, or team settings.
- Create, edit, and delete workflows
- Run and monitor executions
- View and use existing connections (cannot create or modify them)
- View and edit dashboards
Viewer
Read-only access to workflows, executions, connections (without credentials), and dashboards.
- View workflows and their configurations
- View execution history and results
- View connections and dashboards
- Cannot make any changes
Permission Matrix
| Action | Owner | Admin | Editor | Viewer |
|---|---|---|---|---|
| View workflows | Yes | Yes | Yes | Yes |
| Create / edit / delete workflows | Yes | Yes | Yes | - |
| View executions | Yes | Yes | Yes | Yes |
| Run / pause / resume / retry executions | Yes | Yes | Yes | - |
| View connections | Yes | Yes | Yes | Yes |
| Create / edit / delete connections | Yes | Yes | - | - |
| View dashboards | Yes | Yes | Yes | Yes |
| Create / edit dashboards | Yes | Yes | Yes | - |
| Manage team members & settings | Yes | Yes | - | - |
| Invite / resend / revoke invitations | Yes | Yes | - | - |
| Transfer team ownership | Yes | - | - | - |
| Delete team | Yes | - | - | - |
Owner-only actions
Two actions are gated behind the Owner role specifically:
- Transfer ownership — Settings → Members → "Make owner" on a member row. The previous Owner is automatically demoted to Admin so the team always has exactly one Owner. See Members for the flow.
- Delete team — Settings → Members → Danger Zone. Permanently removes the team, all workflows, executions, connections, and the tenant database. Cannot be undone.
The Owner role cannot be assigned through the role picker — promoting to Owner only happens via the explicit Transfer Ownership flow.
Best Practices
- Use Viewer for stakeholders who need to see workflow results without making changes
- Use Editor for workflow builders who design and test automations but don't need to manage credentials
- Limit Admin access to people who need to manage connections and team members — connection credentials are sensitive
- Transfer ownership before leaving — the Owner cannot leave or be removed; they must transfer ownership first
- Keep at least one trusted Admin even if you're the Owner — Admins can manage members if you're unavailable