Role-based access control (RBAC)

The following information applies only to Unstructured organizational accounts. To request an organizational account to be created, contact your Unstructured sales representative, email Unstructured Sales at [e-mail], or complete the online Unstructured contact form.

Roles in Unstructured are part of the role-based access control (RBAC) system that manages permissions for members of organizational accounts and their workspaces. (Roles are not used in personal accounts.)

Any member with the Super Admin role in an organizational account can manage the roles of that organizational account’s members and the roles of the members of the organizational account’s workspaces.

Any member with the Super Admin role in an organizational account or the Workspace Admin role in a workspace within an organizational account can mange the roles of that workspace’s members.

A Super Admin member assigns an organizational account member’s initial role when they are added to the organizational account. This member’s initial role can be changed later.

A Super Admin or Workspace Admin member assigns a workspace member’s initial role when they are added to the workspace. This member’s initial role can be changed later.

Organizational account roles

Organizational account roles include:

• Super Administrator
• Account Member
• Billing Administrator

These roles include the following permissions:

Permission	Super Administrator	Account Member	Billing Administrator
Organizational account management
Can add members to the account	Yes	No	No
Can remove members from the account	Yes	No	No
Can view members of the account	Yes	No	No
Can view an account member’s details	Yes	No	No
Can change an account member’s role	Yes	No	No
Billing
Can view usage and costs	Yes	No	Yes
Can edit payment information	Yes	No	Yes
Can add budget	Yes	No	Yes
Can distribute budget across workspaces	Yes	No	Yes
Workspaces
Can create workspaces	Yes	No	No
Can add members to a workspace	Yes	No	No
Can view members of a workspace	Yes	Yes	No
Can be added to a workspace	Yes	Yes	Yes
Can take actions in a workspace (based on their workspace role)	Yes	Yes	No

Workspace roles

Workspace roles include:

• Viewer
• Developer
• Operator
• Workspace administrators

These roles include the following permissions:

Resource	Action	Viewer	Developer	Operator	Workspace Administrator
Workflows	Read	Yes	Yes	Yes	Yes
	Create	No	Yes	No	Yes
	Edit	No	Yes	No	Yes
	Delete	No	Yes	No	Yes
	Run	No	Yes	Yes	Yes
	Schedule	No	Yes	Yes	Yes
Connectors	Read	Yes	Yes	Yes	Yes
	Create	No	Yes	No	Yes
	Edit	No	Yes	No	Yes
	Delete	No	Yes	No	Yes
Workspace members	Add members to the workspace	No	No	No	Yes
	View the workspace’s members	Yes	Yes	Yes	Yes
	Remove members from the workspace	No	No	No	Yes
	Change the workspace members’ roles	No	No	No	Yes
Budget limits	Add budget	No	No	No	Yes
	Edit budget	No	No	No	Yes
	View budget	Yes	Yes	Yes	Yes

Super Administrators in an organizational account have complete access to all of the organizational account’s workspaces, regardless of whether they are a member of those workspaces.