Default User Permissions

The permissions a user holds are the keys from every role they hold in the selected organization. The full matrix of default roles and permissions is Default Permissions.

Read that matrix for the User role. These points are easy to get wrong from older summaries:

• The User role holds View Catalog and View Designs. It also holds Leave Team.
• The User role holds the view keys for tokens, sessions, keys, and keychains, plus Create Token and Download Token. See Tokens.
• The User role does not hold Invite User to Team, Invite User to Organization, or Assign Roles to Team members.
• The User role does not hold the keys that create, edit, or delete keychains and roles. Those require Provider Admin. See Keychains.

A check mark with an asterisk on the matrix means the role holds the permission only on resources the user owns.

Related Reading

• Account Consolidation
• Notification Preferences
• User Invitations
• User Management
• Users
• Bring Your Own Mail Server