Understand the current permission categories
Roles are built from a set of permission categories covering Projects, Folders, Assets, Review, Workflows, Boards, Actions, Tags, Members, Groups, Roles, Statuses, Schema, Mail Settings, Workspace, AI Usage, Audit, and Pages. This article walks through what each category controls.
Every permission a role can grant is filed under one of these categories, shown as tabs down the left side of the role editor:
| Category | Governs |
|---|---|
| Projects | Creating projects, editing project details/settings/workflows, deleting projects |
| Folders | Creating, renaming, and deleting folders, and moving assets between them |
| Assets | Uploading, downloading, editing, renaming, sharing, and deleting assets |
| Review | Adding and resolving comments, nudging reviewers, escalating ("bring forth") comments, deleting comments |
| Workflows | Applying a workflow to a campaign, creating/editing/deleting workflow templates |
| Boards | Creating/editing/deleting boards and columns, and creating/editing/deleting tasks |
| Actions | Creating, editing, and deleting automated actions |
| Tags | Creating tags, editing (including merging) tags, deleting tags |
| Members | Inviting, editing, and removing workspace members |
| Groups | Creating, editing, and deleting member groups |
| Roles | Creating custom roles, editing permissions on existing roles, deleting custom roles |
| Statuses | Creating, editing, and deleting workflow statuses |
| Schema | Creating, editing, and deleting project schema templates |
| Mail Settings | Configuring outgoing mail (SMTP) settings and editing mail templates |
| Workspace | Branding, domain, and white-label settings |
| AI Usage | Using AI-powered features that consume tokens |
| Audit | Viewing the workspace activity/audit log in the Admin Console |
| Pages | Access to the Timeline / Gantt page and the VR Dashboard page in the main navigation |
Items shown in red in the editor (for example Delete project, Delete asset, Delete workflow) are destructive — they permanently remove data rather than just editing it, so grant them more cautiously than the rest of a category.