Permissions and Sharing
Decoder uses roles (who you are) and resource permissions (what you can access) to control what users can see and edit. Admins and Creators can share Assistants, Workflows, and Workflow Categories with specific people or groups.
Roles (Admin, Creator, Operator)
- Admin – Full control: manage users and groups, create and edit Assistants and Workflows (subject to resource permissions), change company settings.
- Creator – Can create and edit Assistants and Workflows when resource permissions allow; cannot manage users or company settings.
- Operator – View and run only. Cannot create or edit Assistants or Workflows; cannot be granted edit access on any resource. Operators can only receive Can View when shared.
Assign roles in Administration → Manage Users when adding or editing a user.
How Access Is Decided
For each Assistant, Workflow, or Category:
- Owner – The creator always has full access and cannot be revoked.
- Company-level – Applies to everyone in your company (see below).
- Individual – Specific users or groups you add in the sharing dialog (used when company-level is Not visible).
Operators: Edit is never granted to Operators, regardless of company or individual permissions. They only get view/run access.
Company-Level Permission
Each resource has a company-level setting that applies to all company users (except when overridden by role, e.g. Operators):
| Setting | Effect for company users |
|---|---|
| Everyone can edit | All company users can view and edit (default for existing resources). |
| Everyone can view | All company users can view only; only owner and individually shared users can edit. |
| Not visible | Only the owner and users/groups you explicitly add can view or edit. |
New Assistants and Workflows default to Not visible so only the creator has access until they share.
Sharing an Assistant or Workflow
- Open the Assistant or Workflow.
- Click Share (or the sharing control in the header).
- In the sharing dialog:
- Add people or groups – Use the dropdown to select users or groups, choose Can Edit or Can View, then add. (Operators can only receive Can View.)
- Everyone at [Company] – Use the dropdown to set company-level: Everyone can edit, Everyone can view, or Not visible.
- Current access – See owner (read-only) and all granted users/groups; change or remove access as needed.
- Click Save.
Reset all permissions – Use the link in the dialog to set company-level back to Everyone can edit and remove all individual permissions. Confirm in the dialog.
Workflow Categories
Workflow Categories have their own permissions. If a Workflow belongs to a Category:
- Category permissions override the Workflow’s own permissions. For example, if the Category is Not visible to you, you won’t see Workflows in that Category even if the Workflow itself would allow access.
- Share the Category (via Workflows → Categories → Share on the category) to control access for all Workflows in that category.
- You can still share individual Workflows; category rules apply first.
Who Can Share
- Assistants – Users who can edit the Assistant can open the sharing dialog and change permissions.
- Workflows – Users who can edit the Workflow (or the Workflow’s Category, when it applies) can share it.
- Categories – Users who can edit the Category can share it.
Summary
- Roles: Admin (full), Creator (create/edit by permission), Operator (view/run only).
- Company-level: Everyone can edit | Everyone can view | Not visible.
- Sharing: Add users/groups with Can Edit or Can View; Operators only get Can View.
- Owner always has full access; Category permissions override Workflow permissions.
For managing users and assigning roles, see Users & Groups.