Roles

Each member of a client account has one role there. The same person can have different roles in different client accounts.

	Owner	Admin	Author	Viewer
See every saved file in the account	Yes	Yes	Yes	Only what is shared with them
Save files to the account	Yes	Yes	Yes	No
Share files with viewers	Yes	Yes	Yes	No
Add, change and remove members	Yes	Yes, except owners	No	No
Make someone an owner	Yes	No	No	No

Choosing a role

• Owner: the people responsible for the account. Keep at least two, so the account never depends on one person.
• Admin: people who manage the team day to day.
• Author: people who load data and keep files. Authors see everything in the account, so the team works from the same files without sharing each one.
• Viewer: people who read reports. A viewer sees only what an author, admin or owner has shared with them, so unfinished work stays out of sight.

How roles are enforced

The rules are checked by the database on every request, not only by the screens. A viewer who knew the address of an unshared file still could not open it, and nobody in one client account can reach another’s files.