Account Permission Settings

Proper account permission settings are essential for efficient operations and security in a company. This page provides detailed instructions on how to set the necessary account permissions when using exaBase Studio.

Administrators can protect data and improve business efficiency by setting different access permissions for each user. By referring to the following settings and managing permissions, a smooth application operation design across the organization can be achieved.

General

Action	All Users
Create Organization	✅
Get List of Organizations You Belong To	✅
Get List of Spaces You Belong To	✅
Get List of Projects You Belong To	✅

Organization

Organization Roles

• Users belonging to the organization hold either the Administrator or Member role (Organization Role).
• Users who do not belong to the organization but belong directly to spaces or projects are treated as "Guests."

Action	Organization Role
	Administrator	Member	Guest
Get Organization Metadata	✅	✅	✅
Change Organization Metadata	✅	×	×
Delete Organization	✅	×	×
Show List of Users in the Organization	✅ Includes Guests	✅ Does Not Include Guests	×
Add Users to Organization	✅	×	×
Change User Roles in Organization	✅ Role Cannot Be Changed for Oneself	×	×
Remove Users Other Than Oneself from Organization	✅	×	×
Remove Oneself from Organization (Leave Organization)	✅ Only Possible If One or More Administrators Remain After Change	✅	×
Show List of Projects in the Organization	✅	✅ Only Projects with Permissions	×
Create Project in the Organization	✅	✅	×
Show List of Spaces in the Organization	✅	✅ Only Spaces with Permissions	×
Create Space in the Organization	✅	✅	×
Get Templates within the Organization	✅	✅	×

Space

Sharing Settings

• Each space can have a visibility (sharing setting) configured for all users belonging to its parent organization. There are three types of sharing settings:
  • Can edit: Anyone from the organization can edit
  • Can view: Anyone from the organization can view
  • Members only: Only users belonging to the space can access, users from the organization cannot access
• Organization administrators are not affected by sharing settings and have privileged access rights.

Action	Organization Administrator	Organization Members (Sharing Settings)
		Can edit	Can view	Members only
		Get Space Metadata	✅	✅	✅	✅
Change Space Metadata	✅	×	×	×
Delete Space	✅	×	×	×
Add User to Space	✅ Cannot Add Oneself	×	×	×
Show List of Users in the Space	✅	✅	✅	×
Change User Roles in Space	✅	×	×	×
Remove User from Space	✅	×	×	×
Show List of Projects in the Space	✅	✅	✅	×
Create Project in the Space	✅	✅	×	×
Default Role for Projects within the Space	If Can edit: Editor If Can view: Viewer If Members only: ×	Editor	Viewer	×

Space Roles

• There are four types of space roles: Administrator, Publisher, Editor, and Viewer.
• Users belonging to the space hold one of these roles.
• Users with space roles take precedence over permissions determined by sharing settings.

Action/Space Role	Administrator	Publisher	Editor	Viewer
Get Space Metadata	✅	✅	✅	✅
Change Space Metadata	✅	×	×	×
Delete Space	✅	×	×	×
Show List of Users in the Space	✅	✅	✅	✅
Add User to Space	✅	×	×	×
Change User Roles in Space	✅ Cannot Change One's Own Role	×	×	×
Remove User from Space	✅	×	×	×
Show List of Projects in the Space	✅	✅	✅	✅
Create Project in the Space	✅	✅	✅	×
Default Role for Projects within the Space	Administrator	Publisher	Editor	Viewer

Project

Project Roles

• There are four types of project roles: Administrator, Publisher, Editor, and Viewer.
• Users belonging to the project hold one of these roles.
• Users not belonging to the project may still have project roles based on space roles or sharing settings.
• For organization administrators, project roles and space roles take precedence if held, and permissions can change due to sharing settings of space roles to the canvas.
• The final project role is determined in the following order.

Action	Organization Administrator	Project Role
		Administrator	Publisher	Editor	Viewer
Get Project Metadata	✅	✅	✅	✅	✅
Change Project Metadata	✅	✅	×	×	×
Delete Project	✅	✅	×	×	×
Show List of Users in the Project	✅	✅	✅	✅	✅
Add User to Project	✅ Cannot Add Oneself	✅	×	×	×
Change User Roles in Project	✅	✅ Cannot Change One's Own Role	×	×	×
Remove User From Project	×	✅	×	×	×
Remove Oneself from Project (Leave Project)	×	✅ Only Possible If One or More Administrators Remain After Change	×	×	×
View Canvas	×	✅	✅	✅	✅
Edit Canvas	×	✅	✅	✅	×
Deploy Circuit	×	✅	✅	×	×
View Circuit Deployment History	✅	✅	✅	×	×
Check Circuit Status	✅	✅	✅	×	×
View Circuit Status Page	×	✅	✅	×	×
View Secrets List	×	✅	✅	×	×
Add Secret	×	✅	✅	×	×
Update Secret	×	✅	✅	×	×
Issue Template	×	✅	✅	×	×
Update Template (Reissue)	×	✅	✅	×	×
Delete Template	×	✅	✅	×	×
View Version History	×	✅	✅	✅	×
Create Version History Manually	×	✅	✅	✅	×
Rename Version History	×	✅	✅	✅	×
Delete Version History	×	✅	✅	✅	×