Role-based access control (RBAC)
Roles in Unstructured are part of the role-based access control (RBAC) system that manages permissions for members of organizational accounts and their workspaces. (Roles are not used in personal accounts.)
Any member with the Super Admin role in an organizational account can manage the roles of that organizational account’s members and the roles of the members of the organizational account’s workspaces.
Any member with the Super Admin role in an organizational account or the Workspace Admin role in a workspace within an organizational account can mange the roles of that workspace’s members.
A Super Admin member assigns an organizational account member’s initial role when they are added to the organizational account. This member’s initial role can be changed later.
A Super Admin or Workspace Admin member assigns a workspace member’s initial role when they are added to the workspace. This member’s initial role can be changed later.
Organizational account roles
Organizational account roles include:
- Super Administrator
- Account Member
- Billing Administrator
These roles include the following permissions:
| Permission | Super Administrator | Account Member | Billing Administrator |
|---|---|---|---|
| Organizational account management | |||
| Can add members to the account | Yes | No | No |
| Can remove members from the account | Yes | No | No |
| Can view members of the account | Yes | No | No |
| Can view an account member’s details | Yes | No | No |
| Can change an account member’s role | Yes | No | No |
| Billing | |||
| Can view usage and costs | Yes | No | Yes |
| Can edit payment information | Yes | No | Yes |
| Can add budget | Yes | No | Yes |
| Can distribute budget across workspaces | Yes | No | Yes |
| Workspaces | |||
| Can create workspaces | Yes | No | No |
| Can add members to a workspace | Yes | No | No |
| Can view members of a workspace | Yes | Yes | No |
| Can be added to a workspace | Yes | Yes | Yes |
| Can take actions in a workspace (based on their workspace role) | Yes | Yes | No |
Workspace roles
Workspace roles include:
- Viewer
- Developer
- Operator
- Workspace administrators
These roles include the following permissions:
| Resource | Action | Viewer | Developer | Operator | Workspace Administrator |
|---|---|---|---|---|---|
| Workflows | Read | Yes | Yes | Yes | Yes |
| Create | No | Yes | No | Yes | |
| Edit | No | Yes | No | Yes | |
| Delete | No | Yes | No | Yes | |
| Run | No | Yes | Yes | Yes | |
| Schedule | No | Yes | Yes | Yes | |
| Connectors | Read | Yes | Yes | Yes | Yes |
| Create | No | Yes | No | Yes | |
| Edit | No | Yes | No | Yes | |
| Delete | No | Yes | No | Yes | |
| Workspace members | Add members to the workspace | No | No | No | Yes |
| View the workspace’s members | Yes | Yes | Yes | Yes | |
| Remove members from the workspace | No | No | No | Yes | |
| Change the workspace members’ roles | No | No | No | Yes | |
| Budget limits | Add budget | No | No | No | Yes |
| Edit budget | No | No | No | Yes | |
| View budget | Yes | Yes | Yes | Yes |
Super Administrators in an organizational account have complete access to all of the organizational account’s workspaces, regardless of whether they are a member of those workspaces.
Was this page helpful?