Users can be assigned different roles within a workspace. Those role define what actions they’re allowed to perform on that workspace’s resources. The available workspace roles are:

  • Owner
  • Write
  • Execute
  • Read
  • Solution Insights

You can refer to the Workspace Role Permission Matrix below for a quick overview of what each workspace role can or cannot do within a workspace.


Owner

A workspace Owner has full control over the workspace. Only Owners can:

  • Add or remove users from the workspace
  • Manage workspace-level variables

In addition, they have complete access to all solutions, workflows, and runs within the workspace.

This role is ideal for team leads and project owners who are responsible for managing the workspace environment and controlling access for others.

Users who create a workspace are automatically assigned the Owner role for that workspace.

Write

Users with Write permissions can perform all actions within a workspace except managing users and workspace variables. They can:

  • Edit and customize solutions
  • Create, modify, and delete workflows and projects
  • Delete solution or workflow runs

This role is appropriate for security engineers and technical users responsible for building and maintaining workflows, but who don’t need administrative control.

Execute

Users with Execute permissions can run any existing workflow in the workspace. However, they cannot create new workflows or modify existing ones.

This role is appropriate for end users of workflows, who need to trigger workflows and view their results, without modifying the underlying logic.

Read

Users with Read permissions can view all workflows in the workspace but cannot create, edit, delete, or execute them.

This role is appropriate for stakeholders who need visibility into workspace contents for reference, review, or documentation purposes.

Solution Insights

Users with Solution Insights permissions do not have access to workflows. They can only view and query solution results through the Insights view.

This role is appropriate for business users and security analysts who need access to solution outputs but don’t need to interact with the underlying workflows or data sources.

Workspace Role Permission Matrix

PermissionOwnerWriteExecuteReadSolution Insights
Add Users and Teams to the Workspace
Remove Users and Teams from the Workspace
Manage Variables
Edit and Customize Solutions
Create & Update Workflows
Copy Workflows from Library
Create & Edit Projects
Execute Workflows
View Workflows
View Projects
View Workflow Runs
View All Solutions
View Solutions Data
View Files & Variables
Browse Trickest Library