Roles and project access
An account's role says how much of the instance it administers, and its project assignments say which work it can see.
The two account roles
| Role | What it can do |
|---|---|
| Administrator | Manage accounts, host and managed projects, configuration and grants. |
| Member | Access only the projects assigned to that account. |
Only administrators can open Users. A member is refused both the page and the requests behind it.
Where operator authority sits
Instance-operator authority is not a third account role. Every administrator holds it for owner-only actions, such as running the daemon's own controls.
An administrator role assigned only inside a platform room does not grant that authority. Read Direct platform chats for how a shared room resolves the person who is writing.
Assign projects
- Open Users and select the member.
- In the Projects section, select Manage.
- Choose the projects the person may open.
- Save the selection.
A member without any assignment sees no project data at all.
Administrators need no individual assignment for host or managed projects. A paired computer is different: it must be explicitly shared with them before it appears or can be used.
What an administrator can and cannot reach
A paired computer is managed only by the account that paired it. An administrator can use another account's computer after its owner shares it, but cannot change its members, rename it or disconnect it.
The Users administration lists and counts omit computers owned by another account, even when the administrator is a member of them. Manage a computer's sharing from its own project, as its pairing owner.
Keep at least one project
A member must keep one active project. Chetty refuses an assignment change that would leave an account without one, and demoting an account requires one.
Deleting a pairing owner's account is blocked until the owner confirms removal of every paired computer's Project and removal finishes; see Delete a Project. Then an administrator can delete the account. Deleting a shared member removes only that member's assignments, not the shared computer.