Role & Permission Model
AppNavi uses a structured role and permission model across three levels: Tenant, Workspace, and Content. Users are managed at the tenant level, while content such as routes and posts is assigned to workspaces and used within subscriptions.
Permission Scope Overview
Permissions are organized based on the level where responsibilities are managed:
| Permission Level | Purpose | Managed By |
|---|---|---|
| Tenant | Global tenant configuration, subscriptions, applications, workspaces, and users. | Tenant Owner |
| Workspace | Workspace-level users and content management. | Workspace Owner |
| Content | Creation, editing, translation, and publishing activities. | Workspace roles based on assigned permissions |
Permission Matrix
The following matrix provides an overview of common permissions available for each role.
| Role | Manage Tenant Settings | Manage Users | Manage Applications | Manage Workspace Content | Translation Access |
|---|---|---|---|---|---|
| Tenant Owner | Yes | Yes | Yes | Yes | Yes |
| Workspace Owner | No | Yes | No | No | Yes |
| Contributor | No | No | No | No | No |
| Extended Contributor | No | No | No | No | No |
| Translator | No | No | No | No | Yes |
Role Descriptions
Tenant Owner
A Tenant Owner has complete permissions to manage the tenant, including tenant settings, applications, workspaces, users, and all permissions available to underlying user roles.
Workspace Owner
A Workspace Owner can create users and manage content within the workspaces they are authorized for. Workspace Owners do not have access to tenant settings or application management.
Contributor
A Contributor can create, edit, and delete content such as routes and posts in different languages. Contributors cannot add users or make structural application changes.
Translator
A Translator can access only assigned languages and translate content such as routes and posts within their area of responsibility. Translators cannot create applications or modify content structures.
Extended Contributor
An Extended Contributor has similar permissions to a Contributor but also has read-only access to applications and can make design-related changes without modifying application structure.
User Management Workflow References
When assigning users, administrators should first identify whether access is required at the tenant level or workspace level. Role assignment should follow the user's responsibility:
• Workspace administration: https://docs.appnavi.com/docs/subscriptions
Updated about 8 hours ago