Roles & Permissions
TLDR: Four roles control workspace access: Owner (full control), Admin (manage members), Editor (create and edit), Viewer (read-only). Choose based on what each person needs to do.
Role Comparison
| Permission | Owner | Admin | Editor | Viewer |
|---|---|---|---|---|
| View simulations | ✓ | ✓ | ✓ | ✓ |
| Run simulations | ✓ | ✓ | ✓ | ✓ |
| Create simulations | ✓ | ✓ | ✓ | ✗ |
| Edit simulations | ✓ | ✓ | ✓ | ✗ |
| Delete simulations | ✓ | ✓ | ✓ | ✗ |
| Invite members | ✓ | ✓ | ✗* | ✗ |
| Change member roles | ✓ | ✓ | ✗ | ✗ |
| Remove members | ✓ | ✓ | ✗ | ✗ |
| Change workspace settings | ✓ | ✓ | ✗ | ✗ |
| Manage billing | ✓ | ✗ | ✗ | ✗ |
| Delete workspace | ✓ | ✗ | ✗ | ✗ |
*Editors may invite if workspace settings allow "member invites"
Role Descriptions
Owner
The workspace creator. Has full control including billing, deletion, and all management capabilities. There is exactly one owner per workspace.
Admin
Trusted team leads who can manage members and settings, but cannot access billing or delete the workspace. Use for project managers or team leads.
Editor
Contributors who can create and edit simulations but cannot manage other members. Use for team members actively building simulations.
Viewer
Read-only access. Can view and run simulations but cannot make changes. Use for stakeholders who need to review work without editing.
Changing Roles
Owners and Admins can change roles:
- Go to workspace settings or the members panel
- Click the three-dot menu next to a member
- Select the new role
- Changes take effect immediately
When you remove a member, they lose access immediately. Their edits remain in the simulations—removing someone doesn't undo their work.
Best Practices
- Least privilege: Give people the minimum role they need
- Limit Admins: Only promote to Admin those who need member management
- Use Viewers: Great for stakeholders, executives, or clients reviewing work
- Audit regularly: Review members periodically and remove those no longer needed
In workspace settings, you can set the default role for new invites. Consider defaulting to "Viewer" and upgrading as needed.