Permissions
Compare member capabilities with dashboard and owner-only permissions.
This matrix covers business members. A member can hold several roles; the highest dashboard access applies. App roles and agent grants remain separate from dashboard permissions.
Dashboard and team
| Action | Owner | Editor | Viewer | No dashboard access |
|---|---|---|---|---|
| Open dashboard; read operational configuration and Usage | Yes | Yes | Yes | No |
| Use dashboard Assistant reads | Yes | Yes | Yes | No |
| Use Assistant write tools | Yes | Yes | No | No |
| Edit company files, account instructions, agents and tools | Yes | Yes | No | No |
| Edit workflows, presets and panels | Yes | Yes | No | No |
| Start workflows, Studio generations, evals or panel reviews from dashboard | Yes | Yes | No | No |
| Browse Workspace and agent Homes | Yes | Yes | Yes | No |
| Write, move, trash, restore or share Workspace files | Yes | Yes | No | No |
| Upload dashboard chat attachments to fixed attachment folder | Yes | Yes | Yes | No |
| View member directory and per-member activity | Yes | Yes | No | No |
| Manage non-Editor roles and their membership | Yes | Restricted | No | No |
| Grant Editor dashboard access or change Editor roles/membership | Yes | No | No | No |
| Set role agent grants, including grants on Editor roles | Yes | Yes | No | No |
| Invite, renew invites or remove members | Yes | No | No | No |
| Set member/default spend limits | Yes | No | No | No |
| Manage Billing, top-ups and auto top-up | Yes | No | No | No |
| View partner identity | Yes | Yes | Yes | No |
| Change workspace partner | Yes | No | No | No |
| Delete business account | Yes | No | No | No |
Editors can manage membership from a non-Editor role. They cannot replace the full role set of a member who already holds Editor access. Agent grants do not raise dashboard access, so editors can maintain those grants on any role.
Connections and apps
| Action | Owner | Editor | Viewer | No dashboard access |
|---|---|---|---|---|
| Connect/disconnect workspace tool accounts | Yes | Yes | No | No |
| Create/edit credential profiles | Yes | Yes | No | No |
| Reveal a stored credential value | Yes | No | No | No |
| Create, build, publish or manage app access | Yes | Yes | No | No |
| Move apps to Trash, restore or permanently delete | Yes | Yes | No | No |
| Choose app connections | Yes | Yes | No | No |
| Pause/restore app access | Yes | Yes | No | No |
| Use published app functions | Every app role | App roles (full access in the builder preview) | App roles | App roles |
Rule — Stored secrets are not returned to editors or the Assistant. Approving a change does not grant a new role or connection identity.
Chat and external clients
| Action | Owner | Editor | Viewer | No dashboard access |
|---|---|---|---|---|
| Use personal assistant | Yes | Yes | Yes | Yes |
| Chat with active account agents | All | All | All | Role grants |
| Use Botchi MCP agent/app tools | Same live grants | Same live grants | Same live grants | Same live grants |
| Use MCP dashboard reads | Yes | Yes | Yes | No |
| Use MCP dashboard operational writes | Yes, confirmed | Yes, confirmed | No | No |
Agent tool policies still apply in chat. The signed-in member can approve gated actions in their authorized runs, including through MCP. Owner-only governance remains owner-only on every surface.
Partner operator sessions have separate grants and billing; see Partners.