> ## Documentation Index
> Fetch the complete documentation index at: https://docs.os.default.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and sharing

> What each workspace role can do in Default, how sharing a workflow, table view, or queue works, and how admins manage a member's access.

Every member has one workspace role. The role decides what they can see and change across the
whole workspace. On top of the role, individual workflows, table views, and queues can be shared
with specific people at a chosen level.

> [!NOTE]
>
> Roles are set on the **Users** page: select **Settings** in the sidebar, then **Users** under
> **Workspace Settings**. See [Users](https://docs.os.default.com/settings/users.md) for invitations and bulk changes.

## Workspace roles

| Role | What it can do |
| - | - |
| **Owner** | Everything an admin can do, plus billing and single sign-on. |
| **Admin** | Access to all features and actions in your workspace. |
| **Editor** | Edit and share anything in your workspace. Cannot delete. |
| **Member** | View everything, create new resources, edit what you own or are granted. |
| **Viewer** | Read-only access. Viewers cannot be granted edit access. |

Only an owner can make someone else an owner. **Billing** and **Single Sign-On (SSO)** under
**Workspace Settings** are visible to owners only.

The role also decides what an AI assistant connected through the [MCP server](https://docs.os.default.com/mcp-server.md) can
do for that person. Members and editors get the booking-link tools, viewers get none, and admins
and owners get every tool enabled for the workspace. Changing someone to **Viewer** removes
their booking tools.

Whoever creates a workflow, table view, queue, routing policy, event, or workflow folder gets
**Full access** to it, admins included. That is what lets a member delete and share the things
they made.

## Access levels

A share gives one person one level on one resource.

| Level | What it allows |
| - | - |
| **Can view** | Read only. |
| **Can edit** | Read, edit, test, publish, and run. |
| **Full access** | Edit, plus delete, export, and sharing at Full. |

Editors already have **Can edit** on everything, so a share only changes something for an
editor when it is **Full access**. Viewers can receive **Can view** only.

## Share a workflow, table view, or queue

Anyone with **Can edit** or **Full access** on a resource can share it. You can hand out any
level up to your own, so only someone with **Full access** can give **Full access** to another
person. Admins and owners can share anything at any level.

**1. Open the resource**

Open the workflow, the saved table view, or the queue. The default **All people** and
**All companies** tables cannot be shared.

**2. Select Share**

Select **Share** in the header. The dialog lists the people this resource has been shared
with. Admins, owners, and editors can open it without a share, so they are not listed unless
someone shared it with them.

**3. Invite people**

Under **Invite People**, search for a teammate and pick them. New people start at
**Can view**. Change the level next to their name at any time, or remove them from the list.

**4. Copy the link**

Select **Copy link** to share a direct link. The link opens for anyone who has access.

## Manage a member's access

Admins and owners can see and change every share for one person from the **Users** page.

**1. Open Manage access**

On the **Users** page, open the 3-dot menu on a member's row and select **Manage access**.

**2. Add a resource**

Select **Add resource**, then pick the workflow, view, queue, routing policy, or event. New
shares start at **View**.

**3. Set the level**

Each row has a **View**, **Edit**, **Full** switch. Select the X on a row to remove that share.

Admins and owners have full access already, so the dialog shows a notice instead of a list for
them. For a viewer, every share stays at **View**. To let a viewer edit anything, change their
role to **Member** first.

To share one resource with many people at once, select them on the **Users** page and use
**Grant access** in the bulk action bar. See [Bulk actions](https://docs.os.default.com/settings/users.md#bulk-actions).

## Who can delete and export

Deleting a resource, and exporting a table view, need **Full access** on that resource. Owners,
admins, and the creator have it. Editors and members see no **Delete** on anything they were
not given **Full access** to.

Exporting a whole table, **All people** or **All companies** rather than a saved view, is
limited to owners and admins.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.