# Understanding User Roles ### User Roles There are four different user roles in [Whaly](https://whaly.io). #### Admin Builder An admin builder can view / edit / delete everything. Meaning that he has the ability to: | object | right | | | ------------ | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ | | Users Invite | Read / Create | An **admin builder** can invite whoever he wants in the org and give them the appropriate role | | User Roles | Read / Create / Update / Delete | An **admin builder** can change any user role to the role he judges the most appropriate | | Sources | Read / Connect / Update / Delete | An **admin builder** can connect any source to its org and remove sources that were previously connected or change the config. | | Explorations | Read / Create / Update / Delete | An **admin builder** can create, read, modify and remove any exploration | | Workbench | Read / Create / Update / Delete | An **admin builder** can access the workbench, create, remove columns and add formulas, rollups, and lookups | | Reports | Read / Create / Update / Delete | An **admin builder** can create, read, modify and remove any reports | #### Builder A builder has essentially the same rights as an owner except for user management. | object | right | | | ------------ | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------- | | Users Invite | Read | A **builder** can view invitations but cannot invite a user. | | User Roles | Read | A **builder** can view user roles but cannot modify them | | Sources | Read / Connect / Update / Delete | A **builder** can connect any source to its org and remove sources that were previously connected or change the config. | | Explorations | Read / Create / Update / Delete | A **builder** can create, read, modify and remove any exploration | | Workbench | Read / Create / Update / Delete | A **builder** can access the workbench, create, remove columns and add formulas, rollups, and lookups | | Reports | Read / Create / Update / Delete | A **builder** can create, read, modify and remove any reports | #### **Editor** An editor can create reports in the org, and has access to explorations and reports. He has the ability to: | object | right | | | ------------ | ------------------------------- | ------------------------------------------------------------------------------- | | Users Invite | Read | An **editor** can view invitations but cannot invite a user. | | User Roles | Read | An **editor** can view user roles but cannot modify them | | Sources | Read | An **editor** can view connected sources but cannot modify them. | | Explorations | Read | An **editor** can view explorations, can run queries but cannot modify anything | | Workbench | No access | An **editor** doesn't have access to the workbench | | Reports | Read / Create / Update / Delete | An **editor** can create, read, modify and remove any reports | #### **Viewer** A viewer cannot edit anything in the org, but has access to explorations and reports. He has the ability to: | object | right | | | ------------ | --------- | ------------------------------------------------------------------------------ | | Users Invite | Read | A **viewer** can view invitations but cannot invite a user. | | User Roles | Read | A **viewer** can view user roles but cannot modify them | | Sources | Read | A **viewer** can view connected sources but cannot modify them. | | Explorations | Read | A **viewer** can view explorations, can run queries but cannot modify anything | | Workbench | no access | A **viewer** doesn't have access to the workbench | | Reports | Read | A **viewer** can access reports but cannot modify nor delete them | #### **Report Viewer** A report viewer cannot edit anything in the org, and has only access to reports. He has the ability to: | object | right | | | ------------ | --------- | ------------------------------------------------------------------------ | | Users Invite | Read | A **report viewer** can view invitations but cannot invite a user. | | User Roles | Read | A **report viewer** can view user roles but cannot modify them | | Sources | Read | A **report viewer** can view connected sources but cannot modify them. | | Explorations | No access | A **report viewer** doesn't have access to explorations | | Workbench | No access | A **report viewer** doesn't have access to the workbench | | Reports | Read | A **report viewer** can access reports but cannot modify nor delete them | --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.whaly.io/organisation/manage-access-control.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.