Lymnus uses a two-layer permission system: team roles that control who can manage the workspace itself, and workspace roles that control which platform features each member can access day-to-day.
Layer 1 — Team Roles
There are two team roles: Admin and Member. The workspace owner is a fixed position; it cannot be assigned or changed.
Owner
There is one Owner per workspace — the person who created the account. The Owner has full access to everything, including:
Managing the subscription and billing
Inviting and removing team members
Changing team member roles
Accessing and managing all projects, reports, and agents
Admin
Admins have broad workspace access. They can:
Invite and remove team members
Change team member roles between Admin and Member
Create, edit, and manage all projects, reports, and agents in the workspace
Connect and disconnect apps
View and run workflow agents
Member
Members have standard access. By default they can read projects and reports they have been granted access to. What a Member can actually do beyond that is controlled by the Workspace Role assigned to them (see Layer 2 below).
Members cannot invite other team members or access the billing section.
Changing a team member's role
Go to Team settings.
Click the three-dot menu next to a team member.
Select Change Role.
Choose Admin or Member and confirm.
Only the Owner can change member roles.
Layer 2 — Workspace Roles
Workspace roles are per-team roles with granular permission strings that determine which features team members can access inside the platform. Every workspace comes with four default workspace roles:
Viewer
View projects and their documents
View reports
View workflow agents
Use Lymnus Chat
View the team member list
Editor
Everything in Viewer, plus:
Create and edit projects
Create and edit reports
Run workflow agents
Analyst
View and export projects
View and export reports
View and run workflow agents
View usage analytics
Use Lymnus Chat
View the team member list
Manager
Full access to all of the above, plus:
Create, edit, and delete agents
Delete projects and reports
View billing and invoices
Invite and remove team members
Team owners and Admins can also create custom workspace roles with any combination of permissions. Go to Team → Workspace Roles to manage them.
A team member's workspace role can be different from their team role. For example, someone with the Member team role can be given the Manager workspace role to grant them broad feature access without giving them the ability to change other members' team roles.