Roles and permissions
Who can do what, by role, team role, and feature.
Access in Machine QR comes from four sources: your workspace role, your team roles, the teams on a space, and your inbox assignments. Suspended members have no access.
Workspace roles
| Action | Owner | Admin | Member |
|---|---|---|---|
| Create, rename, and move assets and spaces | ✓ | ✓ | ✓ ¹ |
| Add posts to an asset's logbook | ✓ | ✓ | ✓ ¹ |
| Choose an asset's type, set property values | ✓ | ✓ | ✓ ¹ |
| Upload or replace a floor plan, place items on maps | ✓ | ✓ | ✓ ¹ |
| Delete assets and spaces | ✓ | ✓ | |
| Change an asset's identifier or a space's kind | ✓ | ✓ | |
| Manage asset types, properties, tags, and folders | ✓ | ✓ | |
| Link document folders and match folder levels | ✓ | ✓ | |
| Delete a floor plan | ✓ | ✓ | |
| Restore any deleted asset or work order | ✓ | ✓ | |
| Open workspace settings and install setup packs | ✓ | ✓ | |
| Invite members and admins, suspend and remove them | ✓ | ✓ | |
| Invite, change, or remove owners | ✓ | ||
| Work on every team's work orders | ✓ | ✓ |
¹ In spaces the member can edit. See space access below.
Team roles
| Action on the team's work orders | Viewer | Contributor |
|---|---|---|
| See work orders | ✓ | ✓ |
| Submit requests | ✓ | ✓ |
| Create work orders | ✓ | |
| Edit fields, the document, and the feed | ✓ | |
| Lock and unlock | ✓ | |
| Delete own request while still a request | ✓ | ✓ |
Members without a team role see none of the team's work orders.
Space access
| Space | Who reaches it | Who edits it |
|---|---|---|
| No team on it or above it | Every member | Every member |
| A team on it or above it | That team's viewers and contributors | That team's contributors |
| Any space | Owners and admins | Owners and admins |
Access from several teams adds up. Above a space they reach, members see only each parent's name, identifier, and kind. Only owners and admins can move an asset or space to where more people can see it. See Teams and space access.
Inbox assignment
| Action | Assigned member | Owner or admin without assignment |
|---|---|---|
| Read conversations and files | ✓ | |
| Write, answer, cancel, take over | ✓ | |
| Allow or reject held conversations | ✓ | |
| Create inboxes and change assignments | ✓ |
Owners and admins who want to read an inbox assign themselves. Platform admins get no inbox access from their platform role. See Inboxes and conversations.