> ## Documentation Index
> Fetch the complete documentation index at: https://vlyai-1c28d863.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> The full permission matrix — what each workspace role can do, by feature.

Detailed reference of what each workspace role can do.

## Permission matrix

<table className="vly-compare">
  <thead>
    <tr>
      <th>Action</th>
      <th>Owner</th>
      <th>Admin</th>
      <th>Member</th>
      <th>Viewer</th>
    </tr>
  </thead>

  <tbody>
    <tr><td><strong>Workspace</strong></td><td /><td /><td /><td /></tr>
    <tr><td>Edit workspace name / slug</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Delete workspace</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Transfer ownership</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td><strong>Members</strong></td><td /><td /><td /><td /></tr>
    <tr><td>Invite member</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Remove member</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Change role (any role)</td><td className="yes">✓</td><td className="warn">non-owners</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td><strong>Billing</strong></td><td /><td /><td /><td /></tr>
    <tr><td>View invoices</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Change plan</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Update payment method</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td><strong>Projects</strong></td><td /><td /><td /><td /></tr>
    <tr><td>Create project</td><td className="yes">✓</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td></tr>
    <tr><td>Edit any project</td><td className="yes">✓</td><td className="yes">✓</td><td className="warn">own + assigned</td><td className="no">—</td></tr>
    <tr><td>Delete project</td><td className="yes">✓</td><td className="yes">✓</td><td className="warn">own only</td><td className="no">—</td></tr>
    <tr><td>View project (read-only)</td><td className="yes">✓</td><td className="yes">✓</td><td className="yes">✓</td><td className="yes">✓</td></tr>
    <tr><td><strong>Integrations</strong></td><td /><td /><td /><td /></tr>
    <tr><td>Add / remove integration</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>View integration credentials</td><td className="no">—</td><td className="no">—</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td><strong>API keys</strong></td><td /><td /><td /><td /></tr>
    <tr><td>Create API key</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Revoke API key</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td><strong>Audit log</strong></td><td /><td /><td /><td /></tr>
    <tr><td>View audit log</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
    <tr><td>Export audit log</td><td className="yes">✓</td><td className="yes">✓</td><td className="no">—</td><td className="no">—</td></tr>
  </tbody>
</table>

## Notes

* **Integration credentials are never visible**, even to owners. They're stored encrypted and accessed only by the runtime.
* **Owners cannot be demoted by admins**. An owner must demote themselves (and there must be at least one other owner).
* **Role changes are audit-logged** — who changed whose role and when.

## Related

<CardGroup cols={3}>
  <Card title="Roles" icon="user-cog" href="/features/workspace/roles">
    Role overview.
  </Card>

  <Card title="Audit logs" icon="scroll-text" href="/features/workspace/audit-logs">
    History of permission changes.
  </Card>

  <Card title="SSO" icon="key-round" href="/features/workspace/sso">
    Auto-provisioning + roles.
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.