Workspace roles give you fine-grained control over which platform features each team member can access. They sit alongside the standard Admin/Member team roles and operate independently — a team Member can hold a Manager workspace role, and a team Admin can be restricted to Viewer access on specific resources.
Default workspace roles
Every workspace comes with four built-in workspace roles:
Viewer — read-only access
View projects and documents
View reports
View workflow agents
Use Lymnus Chat
Editor — active contributor
All Viewer permissions
Create and edit projects
Create and edit reports
Run workflow agents
Analyst — data-focused access
View and export projects
View and export reports
View and run workflow agents
View usage analytics
Manager — near-full access
All Analyst permissions
Full project management (create, edit, delete, export)
Full report management (create, edit, delete, export)
Create, edit, and delete workflow agents
View billing and invoices
Invite and remove team members
Creating a custom workspace role
Go to Team → Workspace Roles.
Click New Role.
Give the role a name and optionally a colour and description.
Check the permissions you want to grant.
Click Save.
Available permissions
Group
Permission
Projects
View, Create, Edit, Delete, Export
Reports
View, Create, Edit, Delete, Export
Agents
View, Run, Manage (create/edit/delete)
AI Chat
Use Lymnus Chat
Team
View member list, Invite & remove members
Account
View billing & invoices, View usage analytics
Assigning a workspace role to a member
Go to Team → Workspace Roles.
Click Assign next to the role you want to assign.
Search for the team member and confirm.
A member can hold multiple workspace roles simultaneously — their effective permissions are the union of all assigned roles.
Deleting a custom workspace role
Built-in system roles cannot be deleted. To delete a custom role, open it in Team → Workspace Roles and click Delete Role. Members who held that role will lose the permissions it granted.