Permission Matrix

Preview in your theme

ready · editable · 20 permissions × 8 roles (160 cells, all rendered) · click a cell — or focus one and press Space — to cycle allow → deny → inherit · arrow keys / Home / Ctrl+End move around the grid · the ✓ and ⃠ buttons in a column header or a permission row set that whole column / row (row buttons hide below ~28rem of component width) · Owner and Auditor are system roles, so their columns are locked · the permission column stays pinned while the roles scroll sideways

160 cells (20 permissions × 8 roles) · 79 allow · 61 deny · 20 inherit

Workspace roles and permissions
Permission	OwnerFull accessSystem role — its permissions ship with the product and can't be edited.	AdminRuns the workspace	MaintainerOwns projects	DeveloperShips changes	AnalystReads and exports	SupportHelps customers	ViewerRead-only	AuditorComplianceSystem role — its permissions ship with the product and can't be edited.

View workspaceOpen the workspace	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Update settingsName, logo, domain	Allow, locked	Allow	Allow	Inherit	Inherit	Deny	Deny	Deny, locked
Delete workspaceIrreversible	Allow, locked	Inherit	Inherit	Deny	Deny	Deny	Deny	Deny, locked
Transfer ownership	Allow, locked	Inherit	Deny	Deny	Deny	Deny	Deny	Deny, locked

View membersSee the directory	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Invite membersSend seat invites	Allow, locked	Allow	Allow	Allow	Deny	Allow	Inherit	Deny, locked
Remove members	Allow, locked	Allow	Allow	Inherit	Inherit	Deny	Deny	Deny, locked
Change rolesReassign a member's role	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked

View billingPlan and usage	Allow, locked	Allow	Allow	Allow	Allow	Allow	Deny	Allow, locked
Download invoices	Allow, locked	Allow	Allow	Allow	Allow	Inherit	Inherit	Deny, locked
Update payment method	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked
Change planUpgrade or cancel	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked

View projectsBrowse all projects	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Create projects	Allow, locked	Allow	Allow	Allow	Deny	Deny	Inherit	Deny, locked
Archive projects	Allow, locked	Allow	Allow	Inherit	Inherit	Deny	Deny	Deny, locked
Delete projectsIrreversible	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked

View audit log	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Export audit logCSV download	Allow, locked	Allow	Allow	Inherit	Allow	Deny	Deny	Deny, locked
Manage integrations	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked
Rotate API keysBreaks live clients	Allow, locked	Inherit	Deny	Deny	Deny	Deny	Deny	Deny, locked

AllowDenyInherit (no explicit rule)System role — its permissions ship with the product and can't be edited.

readOnly · no bulk buttons, cells don't cycle, but arrow-key navigation still works and the “Billing” section starts collapsed via defaultCollapsedGroups — expanding it is a view action, not an edit

Effective permissions (read-only)
Permission	OwnerFull accessSystem role — its permissions ship with the product and can't be edited.	AdminRuns the workspace	MaintainerOwns projects	DeveloperShips changes	AnalystReads and exports

View workspaceOpen the workspace	Allow, locked	Allow	Allow	Allow	Allow
Update settingsName, logo, domain	Allow, locked	Allow	Allow	Inherit	Inherit
Delete workspaceIrreversible	Allow, locked	Inherit	Inherit	Deny	Deny
Transfer ownership	Allow, locked	Inherit	Deny	Deny	Deny

View membersSee the directory	Allow, locked	Allow	Allow	Allow	Allow
Invite membersSend seat invites	Allow, locked	Allow	Allow	Allow	Deny
Remove members	Allow, locked	Allow	Allow	Inherit	Inherit
Change rolesReassign a member's role	Allow, locked	Allow	Inherit	Deny	Deny

AllowDenyInherit (no explicit rule)System role — its permissions ship with the product and can't be edited.

loading · skeleton keeps the real geometry: the same 17rem permission column plus one square per role column, so nothing jumps when the grants land

empty · no roles and no permissions yet — the default empty slot; pass emptyState to swap in your own onboarding copy

No permissions to map yet

Once this workspace has roles and permissions, they show up here as a grid you can edit.

error · onRetry provided → clicking “Try again” really flips this card to a ready 8 × 5 matrix

Couldn't load the permission matrix

Nothing was changed — your existing roles are still in effect.

Loading preview…

This component is part of Pro

The install command, prompt and concept map are included with a Pro license — one purchase unlocks every Pro component, forever.

Unlock with Pro

Workspace roles and permissions
Permission	OwnerFull accessSystem role — its permissions ship with the product and can't be edited.	AdminRuns the workspace	MaintainerOwns projects	DeveloperShips changes	AnalystReads and exports	SupportHelps customers	ViewerRead-only	AuditorComplianceSystem role — its permissions ship with the product and can't be edited.

View workspaceOpen the workspace	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Update settingsName, logo, domain	Allow, locked	Allow	Allow	Inherit	Inherit	Deny	Deny	Deny, locked
Delete workspaceIrreversible	Allow, locked	Inherit	Inherit	Deny	Deny	Deny	Deny	Deny, locked
Transfer ownership	Allow, locked	Inherit	Deny	Deny	Deny	Deny	Deny	Deny, locked

View membersSee the directory	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Invite membersSend seat invites	Allow, locked	Allow	Allow	Allow	Deny	Allow	Inherit	Deny, locked
Remove members	Allow, locked	Allow	Allow	Inherit	Inherit	Deny	Deny	Deny, locked
Change rolesReassign a member's role	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked

View billingPlan and usage	Allow, locked	Allow	Allow	Allow	Allow	Allow	Deny	Allow, locked
Download invoices	Allow, locked	Allow	Allow	Allow	Allow	Inherit	Inherit	Deny, locked
Update payment method	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked
Change planUpgrade or cancel	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked

View projectsBrowse all projects	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Create projects	Allow, locked	Allow	Allow	Allow	Deny	Deny	Inherit	Deny, locked
Archive projects	Allow, locked	Allow	Allow	Inherit	Inherit	Deny	Deny	Deny, locked
Delete projectsIrreversible	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked

View audit log	Allow, locked	Allow	Allow	Allow	Allow	Allow	Allow	Allow, locked
Export audit logCSV download	Allow, locked	Allow	Allow	Inherit	Allow	Deny	Deny	Deny, locked
Manage integrations	Allow, locked	Allow	Inherit	Deny	Deny	Deny	Deny	Deny, locked
Rotate API keysBreaks live clients	Allow, locked	Inherit	Deny	Deny	Deny	Deny	Deny	Deny, locked

Permission

OwnerFull access

AdminRuns the workspace

MaintainerOwns projects

DeveloperShips changes

AnalystReads and exports

SupportHelps customers

ViewerRead-only

AuditorCompliance

View workspaceOpen the workspace

Update settingsName, logo, domain

Delete workspaceIrreversible

Transfer ownership

View membersSee the directory

Invite membersSend seat invites

Remove members

Change rolesReassign a member's role

View billingPlan and usage

Download invoices

Update payment method

Change planUpgrade or cancel

View projectsBrowse all projects

Create projects

Archive projects

Delete projectsIrreversible

View audit log

Export audit logCSV download

Manage integrations

Rotate API keysBreaks live clients

Effective permissions (read-only)
Permission	OwnerFull accessSystem role — its permissions ship with the product and can't be edited.	AdminRuns the workspace	MaintainerOwns projects	DeveloperShips changes	AnalystReads and exports

View workspaceOpen the workspace	Allow, locked	Allow	Allow	Allow	Allow
Update settingsName, logo, domain	Allow, locked	Allow	Allow	Inherit	Inherit
Delete workspaceIrreversible	Allow, locked	Inherit	Inherit	Deny	Deny
Transfer ownership	Allow, locked	Inherit	Deny	Deny	Deny

View membersSee the directory	Allow, locked	Allow	Allow	Allow	Allow
Invite membersSend seat invites	Allow, locked	Allow	Allow	Allow	Deny
Remove members	Allow, locked	Allow	Allow	Inherit	Inherit
Change rolesReassign a member's role	Allow, locked	Allow	Inherit	Deny	Deny