Roles & Permissions

An overview of user roles & permissions for access control.

Overview

Kognitos uses a role-based access control (RBAC) system to manage who can access your automations and what actions they can perform. Roles can be assigned at two levels:

1. Organization: Grants access and permissions across all workspaces in the organization

2. Workspace: Limits access and permissions to a specific workspace in the organization

Organization-Level Roles

Organization-level roles provide broad access across all workspaces in an organization. These roles are designed for administrators who need organization-wide visibility and control.

1. Org Admin

Has full administrative access across the organization and all its workspaces.

Workspace-Level Roles

Workspace-level roles are scoped to individual workspaces. Users can have different roles across different workspaces based on their responsibilities in the automation workflow.

1. Workspace Admin

Complete control within a workspace, including automations, exceptions, guides, and connections.

2. Automation Author

Focused on developing and testing automations. Can create, edit, fork, restore, validate, publish, and invoke automations.

3. Automation Operator

Focused on day-to-day execution. Can run and monitor automations, manage runs, resolve exceptions, view connections, manage API keys, and read guides, but cannot create or modify automations or manage schedules.

4. IT / Integrator

Manages integrations, connections, and credentials. Has no access to automation logic or exceptions, ensuring clear separation between integration management and process execution.

Permissions

Permission	Org Admin	Workspace Admin	Author	Operator	IT / Integrator
Delete Organization	✅	❌	❌	❌	❌
View Workspaces (org-wide)	✅	❌	❌	❌	❌
Create Workspaces	✅	✅	❌	❌	❌
Edit Workspace	✅	✅	❌	❌	❌
Delete Workspace	✅	❌	❌	❌	❌
Manage Org Preferences	✅	❌	❌	❌	✅
Manage Users (Add, Edit, Remove)	✅	✅	❌	❌	❌
View Connections	✅	✅	✅	✅	✅
Manage Connections (Add, Edit, Remove)	✅	✅	✅	❌	✅
Manage Books (Add, Edit, Remove)	✅	✅	❌	❌	✅
View Automations	✅	✅	✅	✅	❌
Create Automations	✅	✅	✅	❌	❌
Edit Automations	✅	✅	✅	❌	❌
Delete Automations	✅	✅	✅	❌	❌
Fork Automations	✅	✅	✅	❌	❌
Publish Automations	✅	✅	✅	❌	❌
Invoke Automations	✅	✅	✅	✅	❌
View Automation Aggregates	✅	✅	❌	❌	❌
View Runs	✅	✅	✅	✅	❌
Manage Runs (Start, Control)	✅	✅	✅	✅	❌
Archive Runs	✅	✅	✅	✅	❌
Manage Schedules (Create, Edit, Delete)	✅	✅	✅	❌	❌
View Exceptions	✅	✅	✅	✅	❌
Manage Exceptions (Control, Resolve)	✅	✅	✅	✅	❌
View Guides	✅	✅	✅	✅	❌
Manage Guides (Create, Edit, Delete)	✅	✅	✅	❌	❌
View Platform Resources (Read-Only)	✅	✅	✅	✅	✅
Manage Notification Preferences	✅	✅	✅	✅	✅
Send Chat Messages	✅	✅	✅	✅	❌
Manage API Keys (Add, Edit, Revoke)	✅	✅	✅	✅	✅