Workspace Role-Based Access Control (RBAC)
Review the detailed role definitions and permissions matrix for Owner, Admin, Editor, and Viewer roles in Septra.
Septra enforces a strict Role-Based Access Control (RBAC) mechanism to delegate operational capabilities while maintaining data compliance and security boundaries.
---
Workspace User Roles
Every user account in a workspace is assigned exactly one of the following four roles:
- Owner: The creator or primary billing manager of the workspace. Holds exclusive rights to destroy the workspace, transfer ownership, and modify subscription plans.
- Admin: Operational manager. Admins can configure API integrations, deploy new agents, adjust data-sync schedules, upload/delete knowledge base documents, and invite or remove workspace editors/viewers.
- Editor / Member: Frontline execution team. Editors can create and assign tasks to agents, review and approve social media publishing queues, edit drafted outbound copy, and trigger manual synchronization runs.
- Viewer: Read-only stakeholder access. Viewers can monitor agent progress, read past chat histories, view generated attribution reports, and inspect knowledge base documents. They cannot create tasks, adjust connection parameters, or write messages to active agents.
---
Detailed Permissions Matrix
The following matrix outlines the specific features allowed for each role:
| Capability | Owner | Admin | Editor | Viewer |
|---|:---:|:---:|:---:|:---:|
| Delete Workspace / Transfer Ownership | Yes | No | No | No |
| Manage Billing & Subscriptions | Yes | No | No | No |
| Invite Users / Manage Workspace Roles | Yes | Yes | No | No |
| Configure API Integrations (CRMs, Ads) | Yes | Yes | No | No |
| Configure & Deploy AI Agent Lifecycles | Yes | Yes | No | No |
| Upload / Delete Knowledge Base Documents | Yes | Yes | Yes | No |
| Run Manual Integrations Synchronization | Yes | Yes | Yes | No |
| Review & Approve Social Media Queues | Yes | Yes | Yes | No |
| Chat with Active Agents / Assign Tasks | Yes | Yes | Yes | No |
| View Strategy Audits & Reports | Yes | Yes | Yes | Yes |
| Inspect Active Integrations / KB Settings | Yes | Yes | Yes | Yes |
---
Assigning Roles
Workspace Owners and Admins can manage team access under the Team Settings dashboard.
- When inviting a user, you must select their initial access role.
- Users can sign in using their unique credentials. Their permissions are checked on the server side on every API request.
- Owners can promote other users to Admins or demote them at any time. Demoting an Admin to Member immediately revokes their credentials config access.