Roles & permissions

Every workspace has four roles: owner > admin > analyst > viewer.

• Owner — full control including workspace deletion.
• Admin — manage members, connectors, LLM settings and billing.
• Analyst — create/edit metrics, reports, alerts and approve signals.
• Viewer — read-only access.

Restricted columns

Queries touching a Restricted column are refused for viewers and analysts (audited), and executed with masked values for admins and owners (also audited). Every governance action lands in the append-only audit log.