Roles & Permissions
Tenki Cloud's role-based access system. Learn about Owner, Admin, and Standard roles, workspace vs. project scopes, and detailed permission breakdowns.
Roles are designed to help admins create tailored environments that align with their specific use cases. Currently, a user can be assigned only one role per workspace. For example, a user might have an admin role in one workspace, while holding a standard role in another.
Roles
We currently support the following roles:
| Role | Description |
|---|---|
| Owner | Automatically assigned upon Workspace creation. Provides full control over the Workspace. |
| Admin | Full access to manage resources, configurations, and settings. |
| Standard | Focused on day-to-day operations within assigned workspace and projects. |
Important : Workspace ownership transfer is not currently supported.
Scopes
Tenki supports two access levels: Workspace and Projects, allowing permissions to be granted at either level. The scope is defined when inviting a user but can also be adjusted later from the Members page.
| Scope | Description |
|---|---|
| Full Workspace | Includes access to all projects currently in the workspace, as well as any that are added in the future. |
| Project Specific | Access restricted to selected projects only. |
Important : Scope defines where you have access, not what you can do. Both Admins and Standard users share the same set of actions, whether they're assigned to the entire workspace or to specific projects.
Action-Based Permissions
The table below outlines the actions available for each role:
| Action | Owner | Admin | Standard |
|---|---|---|---|
| Update Workspace settings | ✅ | ✅ | ❌ |
| Delete a Workspace | ✅ | ❌ | ❌ |
| Update Workspace Member roles | ✅ | ✅ | ❌ |
| Send and Manage Invitation | ✅ | ✅ | ❌ |
| Create a new Project | ✅ | ✅ | ❌ |
| Update a Project's settings | ✅ | ✅ | ❌ |
| Delete a Project | ✅ | ✅ | ❌ |