Access controls apply in multiple layers. Each customer can have multiple sites, and each site can have multiple workspaces.
Global Roles
This determines a user’s permissions system-wide. Licence Admins (License Superusers and Licence Managers) have the ability to change the system role of a user.
- Normal User - This is the default user type. No special permissions are granted.
- Creator - Creators possess the same permissions as Normal Users and can create new workspaces.
- Support - Users in the Support role can view and edit settings, manage members, and delete any workspace, regardless of their membership status within that workspace.
- Licence Manager - Licence Managers can create new workspaces and administer other user accounts under their licence. They can create, delete and change details of user accounts as well as see an overview of the workspaces that have been created under their licence. Licence Managers also have access to billing information.
- Licence Superuser - Licence Superusers have all the permissions of a Licence Manager and have permanent workspace access to all newly created workspaces.
Site Roles
This determines a user’s permissions within a site.
- Site Member - This is the default user type. No special permissions are granted.
- Site Manager - Site Managers can create new workspaces and administer other user accounts under their site.
- Site Superuser - Site Superusers have all the permissions of a Site Manager and have permanent workspace access to all newly created workspaces.
Workspace Roles
This determines a user’s permissions within a workspace.
- Normal User - This is the default user type in the room.
- Guest Workspace/Room Manager - This role has the same permission as a workspace manager except for the ability to re-issue workspace encryption keys.
- Workspace/Room Manager - By default, Workspace Admins can enable/disable workspace apps, change workspace settings, change folder permissions, manage entities, manage workspace users, post / remove status messages from the newsfeed, send messages, set up coding, view audit logs and view entities, edit calendars, customise reports, export all workspace contents, manage questionnaires, manage templates and re-issue encryption keys.
