Members, roles and approvals
| Role | Can |
|---|---|
| Viewer | See everything in the workspace. Secrets are masked. Can’t change anything. |
| Editor | Change and deploy apps, databases and other nodes; see logs; open shells and terminals. Can’t manage people or delete the workspace. |
| Owner | Everything an editor can, plus root database credentials, approving deploys, members, settings and deleting the workspace. |
Where offered, there are also preset roles in between:
| Preset | For |
|---|---|
| Viewer + logs | Support staff who need to read logs |
| Developer | Edits and opens shells, but secrets stay masked and someone else deploys |
| Deployer | Deploys, restarts and rolls back; no editing or shell |
| Operator | An editor who can also approve deploys |
People who aren’t members of a workspace can’t see that it exists.
Inviting people
Section titled “Inviting people”Members → Invite: type one or more email addresses, pick a role, and add a message if you like. You can include the workspace’s other environments in the same invite. They get an email with a link that works for 7 days; nothing changes until they accept.
Owners
Section titled “Owners”- Making someone an owner asks for your password.
- Every workspace has one primary owner. Only the primary owner can make or remove owners, transfer the workspace or delete it.
- The last owner can’t be removed or demoted.
- Transfer ownership: the new owner has 7 days to accept, and you choose what access you keep.
Deploy approval
Section titled “Deploy approval”Turn on Workspace settings → Deploy approval → Require approval for deploys to have a second person sign off.
- Deploy, rollback, redeploy, promote, pulling a new ref, uploads and git-push deploys become requests. Edits to the settings of running nodes still apply at once.
- The button reads Request deploy. The bottom bar shows Waiting for approval with the requester.
- An owner or Operator opens Review, can leave a comment, and chooses Approve and deploy or Reject. You can’t approve your own request unless you are the only owner.
- The requester can Withdraw. A request goes stale if someone changes the staged changes, and expires after 7 days.
Approval also applies to the CLI and AI agents: their deploys wait for a person too.