# Users Roles & Permissions

EmpowerGPT provides flexible user management with distinct roles designed to support organizational structure, security, and collaboration needs. Each user type has specific permissions that dictate what they can access and perform within the platform.

<figure><img src="/files/JWz26HvMyhvhqKZgovUK" alt=""><figcaption></figcaption></figure>

***

### **Organizational Roles**

Organizational roles govern who can manage users, configure the platform, and control system-wide settings. These roles are assigned at the organization level and define administrative authority rather than content-level access.

| <mark style="color:$success;">✔</mark>  Full access | <mark style="color:$warning;">+</mark>  Partial / limited access | <mark style="color:$danger;">✘</mark>  No access |
| --------------------------------------------------- | ---------------------------------------------------------------- | ------------------------------------------------ |

{% tabs fullWidth="true" %}
{% tab title="User Management" %}

<table><thead><tr><th>Permission</th><th width="188.96875">Organization Owner</th><th width="175.859375">Organization Admin</th><th>Workspace Admin</th></tr></thead><tbody><tr><td>Create / deactivate user accounts </td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$danger;">✘</mark></td></tr><tr><td>Assign roles to users </td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$warning;">+</mark> </td></tr><tr><td>Appoint Workspace Administrators </td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$danger;">✘</mark></td></tr><tr><td>Invite users into a workspace </td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark> </td></tr><tr><td>Create &#x26; manage user groups </td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark> </td><td><mark style="color:$danger;">✘</mark></td></tr><tr><td>Assign account types to users / groups </td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark> </td><td><mark style="color:$danger;">✘</mark></td></tr></tbody></table>
{% endtab %}

{% tab title="Platform & Workspace Settings" %}

<table><thead><tr><th>Permission</th><th width="188.96875">Organization Owner</th><th width="175.859375">Organization Admin</th><th>Workspace Admin</th></tr></thead><tbody><tr><td>Configure Global Platform Settings</td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$danger;">✘</mark></td></tr><tr><td>Configure Workspace Settings</td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td></tr><tr><td>Set per-user permissions in Workspace</td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td></tr></tbody></table>
{% endtab %}

{% tab title="Workspace & Content Access" %}

<table><thead><tr><th>Permission</th><th width="188.96875">Organization Owner</th><th width="175.859375">Organization Admin</th><th>Workspace Admin</th></tr></thead><tbody><tr><td>Access all workspaces globally</td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$danger;">✘</mark></td><td><mark style="color:$danger;">✘</mark></td></tr><tr><td>Global access to all content</td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$danger;">✘</mark></td><td><mark style="color:$danger;">✘</mark></td></tr><tr><td>Access assigned workspaces only</td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td><td><mark style="color:$success;">✔</mark></td></tr></tbody></table>
{% endtab %}
{% endtabs %}

#### Organization Owner&#x20;

{% hint style="info" %}
Highest Privilege Level
{% endhint %}

The Organization Owner holds the **highest level** of authority within EmpowerGPT. This role encompasses all permissions of the Organization Administrator and extends further with exclusive platform-wide capabilities that no other role possesses.&#x20;

**Key capabilities**

* All Organization Administrator permissions, inherited in full.&#x20;
* Global access to every workspace across the organization — without needing to be explicitly invited or assigned.&#x20;
* Global access to all content uploaded or linked within EmpowerGPT, regardless of workspace boundaries.&#x20;
* Ultimate override authority for any platform-wide configuration or access control.&#x20;

This role is typically held by the primary account holder or the executive responsible for the organization's EmpowerGPT deployment.&#x20;

#### Organization Administrator&#x20;

{% hint style="info" %}
Platform-wide administrator&#x20;
{% endhint %}

The Organization Administrator is the custodian of the organization's EmpowerGPT environment. With the highest administrative access below the Organization Owner, this role is responsible for overseeing the setup and ongoing maintenance of the entire platform.&#x20;

**Key capabilities**

* Create and deactivate user accounts across the organization.&#x20;
* Assign roles to users and appoint Workspace Administrators.&#x20;
* Configure global settings that affect all workspaces and users.&#x20;
* Create and manage user groups for streamlined permission assignment.&#x20;
* Assign account types to individual users or groups.&#x20;
* Access and configure any assigned workspace.&#x20;

#### Workspace Administrator&#x20;

{% hint style="info" %}
Workspace-scoped administrator&#x20;
{% endhint %}

Workspace Administrators are pivotal in managing the day-to-day operations of their respective workspaces. Appointed by an Organization Administrator, they handle everything needed to keep a workspace running smoothly.&#x20;

**Key capabilities**

* Configure workspace settings including naming conventions, privacy settings, and access controls.&#x20;
* Create and manage collections and folders within the workspace.&#x20;
* Invite users into the workspace and set specific permissions for each.&#x20;
* Moderate user access to ensure appropriate interaction with workspace content.&#x20;
* Maintain the integrity and organization of documents and folders.&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.empowergpt.ai/users/users-roles-and-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.