User permissions

The following tables provide information on the rights and privileges granted to Qwiet users based on their assigned roles. The first major section covers organization-related roles, while the second covers team-related roles.

For more information about organization-related vs. team-related roles, see RBAC.

Organization roles

Administrative control and subscriptions

	Owner	Super admin	Power user	Member	Guest
Change org owner	✅
Assign super admin role	✅
Delete an org	✅
Claim and use Ocular license	✅	✅	✅	✅	✅
Manage Ocular licenses	✅	✅
Upgrade Qwiet subscription	✅	✅

Organization management

	Owner	Super admin	Power user	Member	Guest
Get basic info about the org	✅	✅	✅	✅	✅
Update org info	✅	✅
Get org configuration	✅	✅
Update org configuration	✅	✅
Manage SAML config	✅	✅
Get list of org's integration tokens	✅	✅
Create an integration token	✅	✅
Delete integration tokens	✅	✅

Team and user management

	Owner	Super Admin	Power User	Member	Guest
List org users	✅	✅	✅	✅
List teams in the org	✅	✅	✅
Get info about teams	✅	✅	✅
Create invite to add users to the org	✅	✅
See pending invites	✅	✅
Delete pending invites	✅	✅
Update teams (modify which users and apps are affiliated with a team)	✅	✅
Update users' roles	✅	✅
Delete a team (does not delete the users or apps)	✅	✅
Delete users	✅	✅

App management

	Owner	Super admin	Power user	Member	Guest
List org apps	✅	✅	✅	✅	✅
Create (add) a new app via the Qwiet CLI	✅	✅	✅
Add an app via GitHub integration	✅	✅	✅
Delete an app	✅	✅	✅
Update app configuration (e.g., VCS settings, policies)	✅	✅	✅
Update custom policies	✅	✅

Viewing scans and findings information

	Owner	Super admin	Power user	Member	Guest
Read/write comments on findings	✅	✅	✅	✅	✅
Read results from analysis	✅	✅	✅	✅	✅
Update findings metadata	✅	✅	✅	✅
Submit an app for analysis	✅	✅	✅
Create AutoFix Pull Request	✅	✅	✅

Team roles

Team and user management

	Team admin	Team developer	Team manager	Team member	Team guest
List users that belong to the org	✅	✅	✅	✅
List own teams	✅		✅
Get info about own teams	✅		✅
Update team members	✅		✅

App management

	Team admin	Team developer	Team manager	Team member	Team guest
Add an app	✅		✅
Delete an app	✅
Update app configuration (e.g., VCS settings, policies)	✅		✅
List org apps
Create (add) a new app via the Qwiet CLI
Add an app via GitHub integration

Viewing scans and findings information

	Team admin	Team developer	Team manager	Team member	Team guest
Read results from analysis	✅	✅	✅	✅	✅
Read/write comments on findings	✅	✅	✅	✅	✅
Update findings metadata	✅	✅	✅	✅
Submit an app for analysis	✅	✅	✅
Create AutoFix Pull Request	✅	✅	✅