Workspace Roles Overview

There are four Workspace roles that can be granted to users.

General:Read

This is the most limited role in a Workspace. A user with this role can:

• see all the data in the Asset Inventory
• create and save their own search filters in Asset Inventory
• query data in the SQL Console
• create and save their own SQL queries in the SQL Console.
• see the list of integrations, destinations, and syncs and their status

General:Write

In addition to the above, a user with this role can:

• create/update/delete integrations, destinations, and syncs
• create/delete Workspace API keys with General:Read or General:Write role.

Admin:Read

This is a Workspace Admin role with a read-only access. A user with this role can do everything in the General:Read role and additionally:

• see all workspace users

Admin:Write

This role is the administration role for the Workspace. A user with this role can do all of the above and:

• create/delete Workspace API keys with Admin:Read, Admin:Write, General:Read and General:Write roles.