# Permissions

> Compare member capabilities with dashboard and owner-only permissions.

This matrix covers business members. A member can hold several roles; the highest dashboard access applies. App roles and agent grants remain separate from dashboard permissions.

## Dashboard and team

| Action | Owner | Editor | Viewer | No dashboard access |
| --- | --- | --- | --- | --- |
| Open dashboard; read operational configuration and Usage | Yes | Yes | Yes | No |
| Use dashboard Assistant reads | Yes | Yes | Yes | No |
| Use Assistant write tools | Yes | Yes | No | No |
| Edit company files, account instructions, agents and tools | Yes | Yes | No | No |
| Edit workflows, presets and panels | Yes | Yes | No | No |
| Start workflows, Studio generations, evals or panel reviews from dashboard | Yes | Yes | No | No |
| Browse Workspace and agent Homes | Yes | Yes | Yes | No |
| Write, move, trash, restore or share Workspace files | Yes | Yes | No | No |
| Upload dashboard chat attachments to fixed attachment folder | Yes | Yes | Yes | No |
| View member directory and per-member activity | Yes | Yes | No | No |
| Manage non-Editor roles and their membership | Yes | Restricted | No | No |
| Grant Editor dashboard access or change Editor roles/membership | Yes | No | No | No |
| Set role agent grants, including grants on Editor roles | Yes | Yes | No | No |
| Invite, renew invites or remove members | Yes | No | No | No |
| Set member/default spend limits | Yes | No | No | No |
| Manage Billing, top-ups and auto top-up | Yes | No | No | No |
| View partner identity | Yes | Yes | Yes | No |
| Change workspace partner | Yes | No | No | No |
| Delete business account | Yes | No | No | No |

Editors can manage membership from a non-Editor role. They cannot replace the full role set of a member who already holds Editor access. Agent grants do not raise dashboard access, so editors can maintain those grants on any role.

## Connections and apps

| Action | Owner | Editor | Viewer | No dashboard access |
| --- | --- | --- | --- | --- |
| Connect/disconnect workspace tool accounts | Yes | Yes | No | No |
| Create/edit credential profiles | Yes | Yes | No | No |
| Reveal a stored credential value | Yes | No | No | No |
| Create, build, publish or manage app access | Yes | Yes | No | No |
| Move apps to Trash, restore or permanently delete | Yes | Yes | No | No |
| Choose app connections | Yes | Yes | No | No |
| Pause/restore app access | Yes | Yes | No | No |
| Use published app functions | Every app role | App roles (full access in the builder preview) | App roles | App roles |

> **Rule** — Stored secrets are not returned to editors or the Assistant. Approving a change does not grant a new role or connection identity.

## Chat and external clients

| Action | Owner | Editor | Viewer | No dashboard access |
| --- | --- | --- | --- | --- |
| Use personal assistant | Yes | Yes | Yes | Yes |
| Chat with active account agents | All | All | All | Role grants |
| Use Botchi MCP agent/app tools | Same live grants | Same live grants | Same live grants | Same live grants |
| Use MCP dashboard reads | Yes | Yes | Yes | No |
| Use MCP dashboard operational writes | Yes, confirmed | Yes, confirmed | No | No |

Agent tool policies still apply in chat. The signed-in member can approve gated actions in their authorized runs, including through MCP. Owner-only governance remains owner-only on every surface.

Partner operator sessions have separate grants and billing; see [Partners](/en/docs/settings/partners).

## Related

- [Access and ownership](/en/docs/concepts/access)
- [Roles](/en/docs/team/roles)
- [App access](/en/docs/apps/access)
- [Approvals](/en/docs/concepts/approvals)