Roles and permissions

What owners, admins, editors and viewers can do in a studio and its projects.

Where Roles are set per studio on Team. Your own role is on Profile.

How roles work

A role belongs to a studio and applies to every project in it.
Each role can do everything the role below it can.
An owner or admin sets roles on Team; an invite link carries the role it was made with.

Reads everything and asks; changes nothing.

Read every page of a project: Library, documents, canon, entities, conflicts, changes, tasks, notes, research notes, metrics, agent activity and the audit log.
Ask canon questions and post in any conversation in Ask, in canon or research mode, and run a continuity check from Ask.
Dictate into Ask with the microphone (nothing is stored).
Export the story bible: Markdown, print and PDF, and EPUB.
Make an API token that reads only, and leave the studio.

Does the canon work.

Import, write and record sources, and re-extract candidates.
Accept, edit or reject candidates in Review, add facts from the reader and run the AI critic.
Decide conflicts, propose, apply and revert changes, and confirm re-checks.
Edit and merge entity pages, edit the project’s entity types, write notes, organise the Library, and rename conversations.
Run Research and continuity checks, run evaluations on Metrics, and create or turn off share links.
Agent tokens can propose; full-access tokens also make editorial edits. Only people decide canon.

Runs the studio and its projects.

Rename the studio.
Create projects and change their name, medium, art style, research profile and conflict severity defaults.
Load a sample or demo set into a project; this replaces its content.
Invite people with any role but owner, change roles and remove members (not owners).

Everything, including the owners.

Only owners can invite, promote, demote or remove an owner.
A studio always keeps at least one owner, so the last owner can’t leave or be demoted.

The AI and agents only propose. Nothing becomes canon without a person’s decision in CanonTracker; no agent token can make one.
Every decision is logged under the person who made it. Removed members are never deleted, so their names stay in the audit log.

Owner: Everything, including managing owners and the studio.
Admin: Manages the team and projects, and can load sample data.
Editor: Imports sources, reviews candidates, decides conflicts and changes.
Viewer: Reads canon, asks questions, posts in conversations and exports. Can’t change canon or sources.

Roles are per studio. Roles and permissions has the full list.