# Roles and Permissions

Duvo uses team-level roles to control what each member can see and do within a team. Every team member is assigned exactly one role, and roles are scoped per team --- a user can have different roles in different teams.

***

## Understanding the Roles

Each role is designed for a distinct type of team member. The key question is: **what does this person need to do in Duvo?**

* **Clarity Member** --- For people contributing to process mapping. They access Clarity to document and refine processes but do not interact with assignments or connections.
* **Member** --- For people who use assignments but do not build them. Members can run assignments shared with them, connect their own connections, and manage files --- everything they need to get work done with assignments others have created.
* **Builder** --- For people who create their own assignments. Builders can build, test, and iterate on their assignments, but they cannot edit assignments created by others. When a Builder creates an assignment, they own it and have full control over its SOP, connections, and revisions.
* **Manager** --- For people who oversee assignments across the team. Managers can create, edit, and delete any assignment --- not just their own. They also manage case queues and have full access to connections and resources.
* **Administrator** --- For people who run the workspace. Administrators have all the capabilities of a Manager, plus they can manage team members, roles, settings, API keys, and view every team member's schedules and job results in one place.
* **Owner** --- For the person ultimately responsible for the team. Owners have full Administrator access plus control over billing, team deletion, and the ability to assign the Owner role to others. Every team must have at least one Owner.

***

## Permissions by Role

### Team Management

| Capability                  | Owner | Administrator | Manager | Builder | Member | Clarity Member |
| --------------------------- | ----- | ------------- | ------- | ------- | ------ | -------------- |
| Manage billing              | Yes   | Yes           | ---     | ---     | ---    | ---            |
| View and edit team settings | Yes   | Yes           | ---     | ---     | ---    | ---            |
| Delete team                 | Yes   | Yes           | ---     | ---     | ---    | ---            |
| Add or remove team members  | Yes   | Yes           | ---     | ---     | ---    | ---            |
| Update member roles         | Yes   | Yes           | Yes     | ---     | ---    | ---            |
| Invite new members          | Yes   | Yes           | Yes     | ---     | ---    | ---            |
| View team members           | Yes   | Yes           | Yes     | Yes     | Yes    | Yes            |

### Assignments

"Own only" means the permission applies only to assignments the user created.

| Capability                          | Owner | Administrator | Manager | Builder  | Member   | Clarity Member |
| ----------------------------------- | ----- | ------------- | ------- | -------- | -------- | -------------- |
| Create new assignments              | Yes   | Yes           | Yes     | Yes      | ---      | ---            |
| Edit any assignment                 | Yes   | Yes           | Yes     | ---      | ---      | ---            |
| Edit own assignments                | Yes   | Yes           | Yes     | Yes      | ---      | ---            |
| Delete any assignment               | Yes   | Yes           | Yes     | ---      | ---      | ---            |
| Delete own assignments              | Yes   | Yes           | Yes     | Yes      | ---      | ---            |
| Create revisions on any assignment  | Yes   | Yes           | Yes     | Own only | ---      | ---            |
| Create revisions on own assignments | Yes   | Yes           | Yes     | Yes      | ---      | ---            |
| View and run assignments            | Yes   | Yes           | Yes     | Yes      | Own only | ---            |
| Manage assignment folders           | Yes   | Yes           | Yes     | Yes      | ---      | ---            |

### Connections and Resources

| Capability                        | Owner | Administrator | Manager | Builder | Member | Clarity Member |
| --------------------------------- | ----- | ------------- | ------- | ------- | ------ | -------------- |
| Access connections                | Yes   | Yes           | Yes     | Yes     | Yes    | ---            |
| Add and manage custom connections | Yes   | Yes           | Yes     | ---     | ---    | ---            |
| Manage files and skills           | Yes   | Yes           | Yes     | Yes     | Yes    | ---            |
| Manage API keys                   | Yes   | Yes           | ---     | ---     | ---    | ---            |
| Access browser logins             | Yes   | Yes           | Yes     | Yes     | ---    | ---            |

### Analytics and Intelligence

| Capability                  | Owner | Administrator | Manager | Builder | Member | Clarity Member |
| --------------------------- | ----- | ------------- | ------- | ------- | ------ | -------------- |
| View team insights          | Yes   | Yes           | ---     | ---     | ---    | ---            |
| View all team members' jobs | Yes   | Yes           | ---     | ---     | ---    | ---            |
| Access Clarity              | Yes   | Yes           | Yes     | Yes     | Yes    | Yes            |
| Contribute to Clarity       | Yes   | Yes           | Yes     | Yes     | Yes    | Yes            |
| Manage Clarity processes    | Yes   | Yes           | Yes     | ---     | ---    | ---            |
| Manage case queues          | Yes   | Yes           | Yes     | ---     | ---    | ---            |

***

## Builder Ownership Model

The Builder role uses an ownership model for assignment editing. When a Builder creates an assignment, they become its owner and have full editing capabilities on that assignment --- including modifying the SOP, adding connections, creating new revisions, and deleting the assignment.

For assignments created by other team members, Builders have view and run access only. To edit assignments they did not create, a user needs the Manager role or above.

***

## Related Topics

* [Teams Overview](https://docs.duvo.ai/teams/teams-overview) --- How teams work and how to structure them
* [Admin Overview](https://docs.duvo.ai/admin-and-troubleshooting/admin-overview) --- Administrative tools and troubleshooting