Roles and permissions

Every member has a role, from Owner, who does everything, to Viewer, who reads.

The roles

Owner: Everything, including the workspace’s members, who has access to what, and deleting it.
Creator: Builds: creates bases, adds apps, changes tables, forms and sites, and publishes them. Giving people access stays with owners.
Editor: Adds, edits and deletes records, responses and content.
Commenter: Sees everything and comments, without changing it.
Viewer: Sees everything, read only.
No access: Sees nothing, unless given access to a base or an app.

A role for one base or one app

The workspace role is where a member starts. On a base, or on one app of a base, give them another role, higher or lower, for that place alone: an editor of the whole workspace can be a viewer in Accounting, and a viewer can edit the CRM.

The apps’ own abilities

Some apps have abilities of their own, each tied to a permission: closing the books in Accounting, approving time off in HR, keeping the register’s customers in Point of Sale, seeing every CRM record. Settings › Roles lists them under each app, so you see who does what at a glance.

What people see

Buttons and pages a role doesn’t allow are hidden, and our servers enforce the same rules, so nothing can be done around the screen.