Tedro uses a layered permission system with roles at two levels: organization and workspace. Organization roles control who can manage billing, members, and workspaces. Workspace roles control access to specific resources like workflows, contacts, and settings within each workspace.Documentation Index
Fetch the complete documentation index at: https://docs.tedro.io/llms.txt
Use this file to discover all available pages before exploring further.
Organization Roles
Organizations have three roles that determine organization-level access:| Role | Scope | Capabilities |
|---|---|---|
| Owner | Organization | Full management, billing, automatic workspace admin. One per organization. |
| Admin | Organization | Member management, automatic workspace admin on all workspaces. |
| Member | Organization | No organization management. Access only to explicitly assigned workspaces. |
Organization owners and admins inherit workspace admin access automatically. They do not appear in the workspace member list but have full access to every workspace.
Workspace Roles
Each workspace has its own member list with three roles:| Role | Description |
|---|---|
| Admin | Full read and write access to all workspace resources. Can publish workflows, manage tools, and change settings. |
| Agent | Can view most resources and manage conversations and contacts. Cannot publish workflows, manage tools, or access settings. Designed for support team members. |
| Viewer | Read-only access to most resources. Cannot access tools or settings. Designed for stakeholders who need visibility without edit access. |
Permission Matrix
The following table shows the exact permissions for each workspace role across all platform resources. RW means read and write access. R means read-only. A dash means no access.| Resource | Admin | Agent | Viewer |
|---|---|---|---|
| Workflows | RW | R | R |
| Templates | RW | R | R |
| Contacts | RW | RW | R |
| Conversations | RW | RW | R |
| Analytics | RW | R | R |
| Agents | RW | R | R |
| Broadcasts | RW | R | R |
| Tools | RW | R | — |
| Settings | RW | R | — |
Agents can read and write contacts and conversations because these are core to their daily work in the inbox. All other resources are read-only for agents.
Inviting Team Members
Invite to Organization
Click Invite Member, enter the person’s email address, and select an organization role (admin or member).
Invite to Workspace
Organization members with the “member” role need explicit workspace access:- Go to Settings > Organization > Workspaces and select a workspace
- Add the member and assign a workspace role (admin, agent, or viewer)
Managing Invitations
The Members page shows pending invitations. You can:- Resend an invitation if the recipient hasn’t accepted
- Revoke an invitation to cancel it
What’s Next
Organizations and Workspaces
Learn about the organization hierarchy, workspace management, and billing.
Inbox
See how team roles affect inbox access and conversation assignment.