Roles & Permissions
Futurity uses role-based access control (RBAC) to manage what you can do within your organization.
Understanding RBAC
Section titled “Understanding RBAC”How It Works
Section titled “How It Works”- Permissions define specific actions (e.g., “create workflows”)
- Roles group permissions together (e.g., “Editor” role)
- You are assigned roles
- You can do what your role permits
Hierarchy
Section titled “Hierarchy”Organization Owner ↓Administrators ↓Custom Roles ↓MembersBuilt-in Roles
Section titled “Built-in Roles”The organization creator. Has all permissions and cannot be removed.
- Full access to everything
- Can transfer ownership
- Cannot be suspended or removed
Administrator
Section titled “Administrator”Full administrative access:
- Manage users and roles
- Access all organization settings
- View all content
- Full feature access
Member
Section titled “Member”Standard user access:
- Use Corint
- Access Vault (owned and shared files)
- Create and run workflows
- View assigned dashboards
Viewer
Section titled “Viewer”Read-only access:
- View shared content
- Cannot create or edit
- Cannot access sensitive settings
Permission Categories
Section titled “Permission Categories”Corint
Section titled “Corint”| Permission | Description |
|---|---|
corint:access | Use Corint AI assistant |
corint:create_agents | Create custom agents |
corint:manage_agents | Edit/delete any agent |
| Permission | Description |
|---|---|
vault:access | Access Vault feature |
vault:upload | Upload files |
vault:share | Share files with others |
vault:delete | Delete files |
vault:manage | Manage all organization files |
Workflows
Section titled “Workflows”| Permission | Description |
|---|---|
workflows:access | View workflows |
workflows:create | Create new workflows |
workflows:edit | Edit existing workflows |
workflows:delete | Delete workflows |
workflows:activate | Turn workflows on/off |
workflows:manage | Manage all organization workflows |
Dashboards
Section titled “Dashboards”| Permission | Description |
|---|---|
dashboards:access | View dashboards |
dashboards:create | Create dashboards |
dashboards:edit | Edit dashboards |
dashboards:delete | Delete dashboards |
dashboards:manage | Manage all organization dashboards |
Integrations
Section titled “Integrations”| Permission | Description |
|---|---|
integrations:access | Use connected integrations |
integrations:manage | Connect/disconnect integrations |
Organization
Section titled “Organization”| Permission | Description |
|---|---|
org:view_settings | View organization settings |
org:edit_settings | Modify organization settings |
org:manage_users | Add/remove users |
org:manage_roles | Create/edit roles |
org:billing | Access billing settings |
Creating Custom Roles
Section titled “Creating Custom Roles”-
Navigate to Role Editor
Go to Organization → Role Editor
-
Create New Role
Click + New Role
-
Name the Role
Give it a descriptive name (e.g., “Marketing Team”)
-
Select Permissions
Check the permissions this role should have
-
Save Role
Click Save
Example Custom Roles
Section titled “Example Custom Roles”Content Creator
corint:accesscorint:create_agentsvault:accessvault:uploadvault:share
Workflow Administrator
workflows:accessworkflows:createworkflows:editworkflows:activateworkflows:manage
External Collaborator
vault:access(limited to shared folders)dashboards:access
Managing Roles
Section titled “Managing Roles”Editing Roles
Section titled “Editing Roles”- Go to Organization → Role Editor
- Select the role to edit
- Modify permissions
- Click Save
Deleting Roles
Section titled “Deleting Roles”- Select the role
- Click Delete
- Assign affected users to a different role
- Confirm deletion
Duplicating Roles
Section titled “Duplicating Roles”Create a new role based on an existing one:
- Select the role to copy
- Click Duplicate
- Rename and modify as needed
- Save the new role
Assigning Roles
Section titled “Assigning Roles”Single User
Section titled “Single User”- Go to User Management
- Click on the user
- Click Edit Role
- Select the new role
- Save
Bulk Assignment
Section titled “Bulk Assignment”- Select multiple users (checkbox)
- Click Bulk Actions
- Select Change Role
- Choose the role
- Apply
Permission Inheritance
Section titled “Permission Inheritance”Some permissions imply others:
managepermissions include view/edit/deleteorg:manage_rolesrequiresorg:view_settings- Admin role bypasses most permission checks
Best Practices
Section titled “Best Practices”- Principle of least privilege: Give minimum necessary access
- Use roles, not individual permissions: Easier to manage
- Regular audits: Review who has what access
- Document custom roles: Keep records of what each role is for
- Test before deploying: Verify roles work as expected
Troubleshooting
Section titled “Troubleshooting””Permission denied” errors
Section titled “”Permission denied” errors”- Check your assigned role
- Verify your role has the required permission
- Check if feature requires additional permissions
- Clear cache and retry
User can access more than expected
Section titled “User can access more than expected”- Check all assigned roles (you can have multiple)
- Verify permission inheritance
- Check for admin role
Can’t create/edit roles
Section titled “Can’t create/edit roles”- Verify you have
org:manage_rolespermission - Check if you’re trying to edit built-in roles (some are locked)
- Organization owner can always edit roles