Team roles and permissions
Members of a customer organization work under workspace authorization. Reading the docs does not require sign-in. Publishing, billing and external writes need matching permissions. The platform-admin and partner consoles are not customer entry points.
Typical customer work
- View diagnosis, evidence and reports: requires membership and workspace authorization.
- Edit content or brand facts: requires content or knowledge permission; paired Chinese and English publishing also needs review.
- Approve actions, publish a site or roll back: requires publish or execution permission. Read-only members cannot do this.
- Connect external data or secrets: requires administrator permission. Secrets are not returned in clear text.
Operations that are not customer entry points
- Platform operators reviewing marketplace artifacts, issuing licenses or changing global configuration.
- Partner actions performed under a customer delegation.
- Open Platform author upload and submission. That entry is still in preparation.
Sources
- Cloud and Studio — Deployment and control boundary
- FAQ — Business content is not uploaded to Cloud by default