> For the complete documentation index, see [llms.txt](https://doc.wearepatchworks.com/product-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.wearepatchworks.com/product-documentation/users-roles-and-permissions/roles-and-permissions-summary.md). # Roles & permissions summary ## Introduction This page details roles and permissions for key areas of the Patchworks platform. User accounts can be associated with one of four possible roles: * Administrator * Manager * User * Read-only The tables [below](#roles-and-permissions-summary) summarise dashboard access by role. It's important to be aware that available features are determined by your [core subscription tier](/product-documentation/getting-started/subscription-tier-limits.md). So, although a user's role might be associated with permissions to access a given feature, that feature is only available if it's included in the active subscription tier - think of it as 'tier trumps role'. For example:


Bob is assigned the `manager` role By default, the `manager` role has required permissions to create and update custom scripts Bob's company is associated with a `standard` subscription tier, which permits read-only access to existing custom scripts and other advanced features Bob can view any existing custom scripts (for example, that have been installed via blueprints), but he cannot make any changes and he cannot create his own scripts			/files/V3oBJaxhdHyYKNnxbkYT
Jack is assigned the `manager` role By default, the `manager` role has required permissions to create and update custom scripts Jack's company is associated with a `professional` subscription tier, which permits full access to custom scripts and other advanced features Jack can view, create and update custom scripts as needed			/files/IlHHYak1h3RqR6IcLe3D

{% hint style="info" %} All permissions refer to **entities** **associated with your own company profile**. If you manage multiple company profiles, please see our [Multi-company profiles](/product-documentation/company-management/multi-company-profiles.md) section for more information. {% endhint %} {% hint style="info" %} Roles determine access to create/read/update/delete functionality. There is nothing in the setup or execution of process flows that's tied explicitly to a user. For example, when a connector is authenticated, we don't check anything about who created it. {% endhint %} ## How are roles assigned to users? When someone registers for a Patchworks account, they are assigned to the `administrator` role, automatically. This user can go on to [create additional users](/product-documentation/users-roles-and-permissions/creating-a-new-user-account-for-your-company-profile.md) and/or [assign roles to other users](/product-documentation/users-roles-and-permissions/updating-the-role-for-an-existing-user-account.md) as needed. {% hint style="info" %} Typically, there is one administrator for each organisation. If you require more than one user with this role, please [raise a support request](/product-documentation/raising-a-support-ticket.md). {% endhint %} ## Roles & permissions summary The tables below summarise access by role for key tasks within the Patchworks dashboard: * [Company permissions](#company-permissions) * [Company users](#company-users) * [Linked companies](#linked-companies) * [Marketplace](#marketplace) * [Private marketplaces](#private-marketplaces) * [Connectors](#connectors) * [Connector instances](#connector-instances) * [Process flows](#process-flows) * [Virtual environments](#virtual-environments) * [Run logs](#run-logs) * [General settings](#general-settings) * [Custom scripts](#custom-scripts) * [Cross-reference lookups](#cross-reference-lookups) * [Caches](#caches) * [Patchworks API](#patchworks-api) ### Company profile Company permissions refer to features that are available from **settings** > **my company profile**.

Task	Allowed roles
View company profile	administrator, manager, user, read-only
Update company profile name	administrator
Update company profile contact information	administrator, manager
Add & manage banner messages	administrator
Delete company profile	administrator

### Company admin Company admin refers to features that are available from **settings** > **company admin**.

Task	Allowed roles
View/access company admin options	administrator
SSO setup	administrator

### Company users Company user permissions refer to features that are available from **settings** > **my company profile** > **extra** > **users**.

Task	Allowed roles
View company users	administrator, manager, user, read-only
Search company users	administrator, manager, user, read-only
Create company user with an `administrator` role	patchworks support
Create a company user with a `manager` role	administrator
Create a company user with a `user` or `read-only` role	administrator, manager
Update details for an existing company user (all roles)	administrator, manager
Elevate an existing `read-only` account to a `user` role	administrator, manager
Elevate an existing `user` or `read-only` account to a `manager` role	administrator
Elevate an existing `user`, `read-only` or `manager` account to an `administrator` role	patchworks support
Demote an existing `manager` account to a `user` or `read-only` role	administrator, manager
Demote another `administrator` account to a `manager`, `user` or `read-only` role	patchworks support
Trigger password reset password for a company user	administrator, manager
Update own user details	administrator, manager
Elevate or reduce own role	none
Enable/disable own MFA	administrator, manager, user, read-only
Delete company user	administrator, manager
Restore company user	administrator, manager
Delete own user profile	administrator, manager

### Company insights Company insights refers to your account summary company insights page.

Task	Allowed roles
View company insights	administrator, manager, user, read-only

### Linked companies Permissions in this section are only relevant if you use Patchworks to manage multiple companies - i.e. you have a [multi-company profile](/product-documentation/company-management/multi-company-profiles.md) with one or more linked companies.

Task	Allowed roles
Linked companies
Adding & linking a new company to your multi-company profile	patchworks support, administrator
Switch in & out of linked companies	administrator, manager
Update subscriptions for linked companies	patchworks support, administrator
View linked companies for your multi-company profile	administrator, manager
Un-linking a company from your multi-company profile	patchworks support
Team members
View team members for own company	administrator, manager, user, read-only
Create new team member to manage a linked company	administrator
Assign user roles for an existing team member	administrator, manager
View team members who manage a linked company	administrator, manager
Grant & revoke access for team members to manage a linked company	administrator, manager
Trigger a password reset for an existing team member	administrator, manager
Removing a team member account	administrator, manager
'Native' company users
View 'native' users for a linked company	administrator, manager
Create a new 'native' user for a linked company	administrator, manager
Assign user roles for an existing 'native' company user	administrator, manager
Trigger a password reset for an existing 'native' company user	administrator, manager
Remove a 'native' linked company user from their company profile	administrator, manager

### Marketplace Marketplace permissions refer to features that are available from the [marketplace](https://app.wearepatchworks.com/marketplace) page.

Task	Allowed roles
Install marketplace blueprints	administrator, manager
Build blueprints	administrator
Browse & view marketplace connectors	administrator, manager, user, read-only
Install marketplace connectors	administrator, manager
Update marketplace connectors	administrator, manager
Browse & view marketplace process flows	administrator, manager, user, read-only
Install marketplace process flows	administrator, manager
Browse marketplace scripts	administrator, manager, user, read-only
Preview script from scripts list	administrator, manager, user, read-only
Install marketplace scripts	administrator, manager

### Private marketplaces [Private marketplace](/product-documentation/marketplace/private-marketplaces.md) permissions refer to features available to work with private marketplace resources.

Task	Allowed roles
View private marketplace	administrator, manager, user, read-only
Install resources (blueprints, connectors, process flows, scripts, cross-reference lookups)	administrator, manager
Upload resources (blueprints, connectors, process flows, scripts, cross-reference lookups)	administrator

### Private blueprints Blueprint permissions refer to features that are available from the private marketplace, and the [blueprint installs](/product-documentation/blueprints/working-with-private-blueprints/rolling-out-blueprint-updates/viewing-current-blueprint-installations.md) page.

Task	Allowed roles
View private blueprints	administrator, manager, user, read-only
Build a private blueprint	administrator, manager
Update a private blueprint	administrator, manager
Bulk update blueprint installations	administrator, manager
Manually accept a blueprint update	administrator, manager
Delete a blueprint	administrator, manager

### Connectors Connector permissions refer to features that are available from the [my connectors](https://app.wearepatchworks.com/connectors) page.

Task	Allowed roles
Browse installed connectors	administrator, manager, user, read-only
View installed connector settings	administrator, manager
Update installed connector settings	administrator, manager
Delete installed connectors	administrator, manager

### Connector instances Connector instance permissions refer to features that are available from the [my connectors](https://app.wearepatchworks.com/connectors) page.

Task	Allowed roles
View connector instances	administrator, manager, user, read-only
View connector instance settings	administrator, manager, user, read-only
Update connector instance settings	administrator, manager
Delete connector instances	administrator, manager

### Process flows Process flow permissions refer to features that are available from the [process flows](https://app.wearepatchworks.com/flows) page.

Task	Allowed roles
View process flow list	administrator, manager, user, read-only
View canvas content for existing process flows	administrator, manager, user, read-only
Create process flows (add/update/remove shapes)	administrator, manager
Update process flows (add/update/remove shapes)	administrator, manager
Create cache (cache shape settings)	administrator, manager
Create data pool (de-dupe shape settings)	administrator, manager
Delete process flows	administrator, manager
Run process flow manually	administrator, manager
Enable & deploy process flows (process flow settings)	administrator, manager
Apply/remove labels (process flow settings)	administrator, manager
Create labels (process flow settings)	administrator, manager
Apply/remove email failure groups (process flow settings)	administrator, manager
Add flow variables (process flow settings)	administrator, manager
Update flow variables (process flow settings)	administrator, manager
Remove flow variables (process flow settings)	administrator, manager
Duplicate process flow (process flow settings)	administrator, manager

### Virtual environments Virtual environment permissions refer to features used to work with [virtual environments](/product-documentation/virtual-environments/about-virtual-environments.md).

Task	Allowed roles
View virtual environments	administrator, manager, user, read-only
Create virtual environments	administrator, manager
Configure virtual environments	administrator, manager
Manage virtual environments	administrator, manager
View virtual environment packages	administrator, manager
Configure virtual environment packages	administrator, manager
Manage virtual environment packages	administrator, manager

### Run logs Run logs permissions refer to features that are available from the [run logs](https://app.wearepatchworks.com/flow-run-logs) page.

Task	Allowed roles
View run logs list	administrator, manager, user, read-only
View run logs	administrator, manager, user, read-only
View run logs (classic)	administrator, manager, user, read-only
View run log details	administrator, manager, user, read-only
Download run logs	administrator, manager
View run log payloads	administrator, manager, user, read-only
Download run log payloads	administrator, manager
Stop process flow	administrator, manager

### General settings General settings permissions refer to features that are available from the [settings](https://app.wearepatchworks.com/settings) page.

Task	Allowed roles
Manage own account settings	administrator, manager
View notification groups	administrator, manager, user, read-only
Add & manage notification groups	administrator, manager
View audit logs	administrator, manager, user, read-only
Search audit logs	administrator, manager, user, read-only
View labels	administrator, manager
Add & manage labels	administrator, manager
View data pools	administrator, manager, user, read-only
Add & manage data pools	administrator, manager
View usage alerts	administrator, manager, user, read-only
Add & manage usage alerts	administrator, manager

{% hint style="info" %} For **my company** profile permissions, see [company permissions](#company-permissions) and [company users](#company-users). {% endhint %} ### Custom scripts Custom script permissions refer to features that are available from the [scripts](https://app.wearepatchworks.com/scripts) page.

Task	Allowed roles
View custom scripts list	administrator, manager, user, read-only
View custom script details	administrator, manager, user, read-only
Create custom scripts	administrator, manager
Update custom scripts	administrator, manager
Delete custom scripts	administrator, manager

### Cross-reference lookups Cross-reference lookup permissions refer to features that are available from the [cross-reference lookups](https://app.wearepatchworks.com/cross-reference-lookups) page.

Task	Allowed roles
View installed cross-reference lookups	administrator, manager, user, read-only
Search installed cross-reference lookups	administrator, manager, user, read-only
View cross-reference lookup values	administrator, manager
Add & manage cross-reference values	administrator, manager
Delete cross-reference lookups	administrator, manager

### Caches Cache permissions refer to features that are available from the [data caches](https://app.wearepatchworks.com/caches) page.

Task	Allowed roles
View existing cache lists	administrator, manager, user, read-only
Search existing caches	administrator, manager, user, read-only
View existing cache details	administrator, manager, user, read-only
Update existing cache details	administrator, manager
View existing cache contents	administrator, manager, user, read-only
Clear existing cache contents	administrator, manager
Delete caches	administrator, manager

### Patchworks API

Task	Allowed roles
API access	administrator, manager, user, read-only
Generate & manage API keys	administrator, manager